last executing test programs: 10m56.360049836s ago: executing program 32 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13c16}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfffffff8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 7m22.902357961s ago: executing program 33 (id=1295): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 7m5.501910798s ago: executing program 4 (id=1374): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) futex(&(0x7f00000002c0), 0xd, 0x2, &(0x7f0000000480), 0x0, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109", @ANYBLOB="e6329f"], 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)}, 0x4000) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x10e, 0x4) openat$mice(0xffffff9c, &(0x7f0000000040), 0x167342) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r4, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x8, 0x0, 0x0}}, 0x10) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) 7m4.49444849s ago: executing program 6 (id=1378): chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m4.152623631s ago: executing program 6 (id=1384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f00000003c0)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) syslog(0x9, &(0x7f0000000240)=""/99, 0x3a) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fb, 0x2) r5 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x1, 0x40) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x4, 0x1, 0x2, 0x0, 0x9}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xfffffff2, 0x6}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, 0x0, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000300)=0x2) shutdown(0xffffffffffffffff, 0x0) r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, r7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x3c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xc5, @remote, 0x4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 7m3.763571263s ago: executing program 6 (id=1389): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c2787b7762f8c3efdb6ae7594f4726f6469722c756e695f786c6174653d302c726f6469722c696fff7f00007365743d69736f383835399dc52c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c666c7573682c757466383d302c73686f72746e616d653d19932b3cba099118d2e7556d6978cb6465706167653d3935302c6e6f6e756d7461696c3d302c666c7573682c73686f72746e616d653d77696e39352c726f6469722c000000000000"], 0x5, 0x390, &(0x7f0000000700)="$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") ioctl$UBLK_U_IO_NEED_GET_DATA(0xffffffffffffffff, 0xc0107522, &(0x7f0000002b80)={0x2, 0x640, 0x785a, &(0x7f0000001b80)=@buf_512="54386208799f23eac736b92e7a47ae3ace2903ea13b9625b393ace4d00e69ff8424e8fae4d172faae3e5240beb39ad906a3f80ca174b50e9708e08a26aeda2d0ba418f37d2ff984e8459035b5250b91338b50f751c4369643bba56704045e12da80f613bebeddde4bfd0c0755991c361106623d6480e5040b4d5f39b5a484465af03f25c260ab8bd845af7d6e826183c863183c62d5beffc3a4f151125b39e3e7cf31de71acf7fd58e2d16e912c7e8423db7edffaf3f675b6f3c603afbfefa6e63ab07767494920be0a51c73a42d142cde3025cc5b42ea9ce1e2781d50ae075b3890a46f701b38a2f2980c23d611c45992b8f0941c27e573a1db67c07d773e743ae58c787156de8a0ec98e4e6302dd9c21059a9d05bf6b344f09406c0a66eb5da6f0b62665a7bed410c69611154b7f52cbd6483265669353d9a6ad8f0b4cb3055a3403b3ee81d050b2a29bc0c37a08de676b4c42a92b944a9eea593fd863d76aa1dfe4a43d2cb2b93cb5d74e1e4e261ec671b9be979327be9654838d838ed8c0fd196c01567012955a151de67c0cf4c402bb0245ef14b93b8296d880df22e212e9f1e8bc83c4f8f6f618340fdef79d10713ba1120f7ce859ba9c4f7f8a993dabe97340a6ca59dfc26eba04125c1b196a697c3c05f282335808b6c91a74e4296a93185572ecc55ebd1e76281deff7e8a438116f98b699b81575e9bb0149f85568"}) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) 7m2.650208389s ago: executing program 6 (id=1397): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 7m2.373733327s ago: executing program 6 (id=1401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001080)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xe}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xa, 0x6, 0xeea0, 0x1}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x48001}, 0x4000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 7m2.235940382s ago: executing program 4 (id=1403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000004cc60000000000000a20000000000a03000000000000000000070000040900010073797a300000000090000000090a010400000000000000000700000308000a40000000000900020073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c61737400000000040002800800034000000120140000001000010000000000000000000084000a"], 0xd8}}, 0x20050800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x6, 0x68000) ioctl$FE_READ_SIGNAL_STRENGTH(r4, 0x80026f47, &(0x7f0000000300)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002100), 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000002140)={0x0, 0x0, 0x7}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, r8, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r10 = socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r11 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r11, 0xe) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)={'syztnl2\x00', r9, 0x7800, 0x700, 0x8e43, 0xfffffff9, {{0x20, 0x4, 0x0, 0x1a, 0x80, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast2, @broadcast, {[@generic={0x82, 0x2}, @timestamp_prespec={0x44, 0x34, 0xbb, 0x3, 0x7, [{@loopback, 0x24b17a25}, {@remote, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x7}, {@local, 0x4}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x31, 0x0, [{0x5, 0xd, "4012c5c7d853c070a7f669"}, {0x0, 0xc, "99fae8d8a95297c3ad9b"}, {0x5, 0x7, "8290ef9852"}, {0x7, 0x3, "f7"}, {0x0, 0x8, "e902b7ce8ae4"}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000c40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000740)={0x428, r12, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "ccbc2331df0f119015"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xed, 0x5, "89d00edcb0e5f189e57b7d39077199d0d4a4ecc2bf5e319d272572b6bcb39ebebac71dce6b57589081a731b74da3c25c44389491780a70e7a79ace9bb4616cf399078574e661d98a05c7f74545241ac9deb6ad9d48b8aea7e72d186e3b92fa3b264f504a4c2f60df57544d24ff31bb03108817f378903b49227a6f07d49b9a514ee104627cd55c9bb148851b7a25e63b2c15b26f618f9f39028d0311b01c450b9bc1cd5f3d167d35b1dddc18b02cfc5b84ccb2bd008462bc53782cb584c67e34f234dcc96e0ba6716c7497bf93aa58e711a6e76aff1c5355fd995d676a6f61174608663d5294cff299"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x258, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "ba4d3186c5aebcabeb54c950fe21108445fd751a05b67ebf987f93297c09526f2edd176e720ebaa2213b26a3c015f9ed17dbfa395cd5aed33919487054fa9938fee238b50992492eec233a7747d234fb59c8f95a5265eb6c1579eafd9c85d4f836668007e8525da20221eaa7d6262ea483af4ff4a6afbfe7f3f0a3d88994af4bb6a68906516acaa5446007cb429b6ed394f8e58e13e5f5e6a57b1a191b407515c9e61ad5b669ebc4959f0d2474999a93a3cf597847a3c23d8e9cf165fca732e57964fd479c60c4490528396aefe99ed80850"}, @ETHTOOL_A_BITSET_VALUE={0x8e, 0x4, "2edeb6bf7ef7927bdad154fc999c471c02bef5f7f6d6aa1655f832ef9d9ed8417b99d9ab7be0863a723eb4145f9f81024a5017314b8d60510d165d84a4970110a3ddc36fcb1e0b133b14885a0306bc1782117a72febce59e58feaa00f7431d9652062daf893b9332f48974ca0e01c27092984ae6977a6d4ff4b180f76fd0af1899437bcbf8ee04eb49fc"}, @ETHTOOL_A_BITSET_MASK={0x81, 0x5, "e41fe9d2a536546fac98d373a1efd7d18864fb75ad9e1e74e9a8c919d35c5d5d2fac9f4bc0b7ac1d8749a1c52da0ba14f274c1e72397e892d3c5b4e89f9bfde95f36b6633c96af7de965816c23986d4e406bfca8d6bd1eb60dc8b695a45d56329f1e3c2a6789aa439695aa09e35d2d23871ca66f1bccc6b789344d7392"}, @ETHTOOL_A_BITSET_MASK={0x44, 0x5, "7312f72448ffa05089eece79108b0e6467646a6d6aa9005019004485424198ed2fa8153deda5e29fcc5a6705be54de2009cabdfcd7fc22ee549ebe89b4ef5427"}]}]}, 0x428}, 0x1, 0x0, 0x0, 0x67ff8f791bb48dcd}, 0x0) 7m1.027806441s ago: executing program 4 (id=1409): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c2787b7762f8c3efdb6ae7594f4726f6469722c756e695f786c6174653d302c726f6469722c696fff7f00007365743d69736f383835399dc52c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c666c7573682c757466383d302c73686f72746e616d653d19932b3cba099118d2e7556d6978cb6465706167653d3935302c6e6f6e756d7461696c3d302c666c7573682c73686f72746e616d653d77696e39352c726f6469722c000000000000"], 0x5, 0x390, &(0x7f0000000700)="$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") ioctl$UBLK_U_IO_NEED_GET_DATA(0xffffffffffffffff, 0xc0107522, &(0x7f0000002b80)={0x2, 0x640, 0x785a, &(0x7f0000001b80)=@buf_512="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"}) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000340), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) 6m58.2407033s ago: executing program 6 (id=1416): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xd, 0xf, 0x4, 0xffff, 0x2, 0x3, 0x10007f, 0x20000026, 0x4d, 0x6, 0x3, 0xb, 0x2, 0x100, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffffa8, 0x7, 0x3, 0x9, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x201, 0x3e, 0x10000, 0x6, 0x6, 0x9, 0x5, 0x4, 0x8, 0xe, 0x80, 0x1, 0xd, 0x6, 0x8, 0x4, 0x1, 0x2], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e4, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x7fff, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x3ff, 0xffff, 0x46, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x6, 0x103], [0x3, 0xa, 0x4, 0x5, 0xffffffff, 0x100, 0x8d2, 0x9, 0x7, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x1ff, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x6000, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9, 0x7, 0xa9, 0x5, 0x3, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0xff, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xfffffff7, 0x2, 0x5, 0x1, 0xfffff800, 0x7, 0xe0a7, 0x6, 0x96, 0x381f, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0x6, 0x10080, 0x3, 0x80, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x6101, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m57.250642202s ago: executing program 34 (id=1416): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xd, 0xf, 0x4, 0xffff, 0x2, 0x3, 0x10007f, 0x20000026, 0x4d, 0x6, 0x3, 0xb, 0x2, 0x100, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffffa8, 0x7, 0x3, 0x9, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x201, 0x3e, 0x10000, 0x6, 0x6, 0x9, 0x5, 0x4, 0x8, 0xe, 0x80, 0x1, 0xd, 0x6, 0x8, 0x4, 0x1, 0x2], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e4, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x7fff, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x3ff, 0xffff, 0x46, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x6, 0x103], [0x3, 0xa, 0x4, 0x5, 0xffffffff, 0x100, 0x8d2, 0x9, 0x7, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x1ff, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x6000, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9, 0x7, 0xa9, 0x5, 0x3, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0xff, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xfffffff7, 0x2, 0x5, 0x1, 0xfffff800, 0x7, 0xe0a7, 0x6, 0x96, 0x381f, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0x6, 0x10080, 0x3, 0x80, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x6101, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m56.831102636s ago: executing program 5 (id=1419): r0 = epoll_create1(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) socket$l2tp(0x2, 0x2, 0x73) close_range(r0, 0xffffffffffffffff, 0x0) 6m56.540842254s ago: executing program 5 (id=1421): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$tipc(0x1e, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0x7, 0x5a, 0x3ff, 0xffff1a37, 0x3, 0x5, 0x7}) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0xc0, &(0x7f0000000000)={0x80, 0x14, 0xf801, 0x200}, 0x8, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) ioctl$TCFLSH(r0, 0x400455c8, 0x100000000000004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x25, 0x2, 0x6) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4621, 0x3, 'wrr\x00', 0x0, 0x81, 0x73}, {@private=0xa010102, 0x4e23, 0x3, 0x1cb, 0x12d61, 0x12d5c}}, 0x44) syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200080c4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6m56.156164857s ago: executing program 4 (id=1422): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') fchown(0xffffffffffffffff, 0x0, 0x0) 6m55.629496724s ago: executing program 4 (id=1425): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a6c000000060a0104000000000000000002000001400004803c0001800a0001006c696d69740000002c00028008000340000000050c000140fffffffffffffffe06000240000000000000000408000440000000010900010073797a30000000000900020073797a32000000001400000011000100"/146], 0x94}}, 0x8810) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x84}}, 0x20008040) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x4000000b}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 6m55.198539797s ago: executing program 5 (id=1427): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 6m52.450700415s ago: executing program 4 (id=1433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008855, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x40001}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000040)=""/100, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)}], 0x1}, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)="030000001e00060000201a803300", 0xe) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4028af11, &(0x7f00000001c0)) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="04"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f00000000c0)) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x3e, 0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000240)=[{r1, 0x8040}, {r2, 0x400}], 0x2, &(0x7f0000000280), &(0x7f00000002c0)={[0xf8]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000200)=0x2) 6m52.042316899s ago: executing program 35 (id=1433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008855, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x40001}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000040)=""/100, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)}], 0x1}, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)="030000001e00060000201a803300", 0xe) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4028af11, &(0x7f00000001c0)) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="04"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f00000000c0)) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x3e, 0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000240)=[{r1, 0x8040}, {r2, 0x400}], 0x2, &(0x7f0000000280), &(0x7f00000002c0)={[0xf8]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000200)=0x2) 6m52.037828789s ago: executing program 5 (id=1435): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') fchown(0xffffffffffffffff, 0x0, 0x0) 6m51.520831046s ago: executing program 5 (id=1439): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x9) 6m48.024605797s ago: executing program 5 (id=1448): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$tipc(0x1e, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0x7, 0x5a, 0x3ff, 0xffff1a37, 0x3, 0x5, 0x7}) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0xc0, &(0x7f0000000000)={0x80, 0x14, 0xf801, 0x200}, 0x8, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) ioctl$TCFLSH(r0, 0x400455c8, 0x100000000000004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x25, 0x2, 0x6) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4621, 0x3, 'wrr\x00', 0x0, 0x81, 0x73}, {@private=0xa010102, 0x4e23, 0x3, 0x1cb, 0x12d61, 0x12d5c}}, 0x44) syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200080c4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6m47.571591612s ago: executing program 36 (id=1448): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$tipc(0x1e, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0x7, 0x5a, 0x3ff, 0xffff1a37, 0x3, 0x5, 0x7}) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0xc0, &(0x7f0000000000)={0x80, 0x14, 0xf801, 0x200}, 0x8, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) ioctl$TCFLSH(r0, 0x400455c8, 0x100000000000004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x25, 0x2, 0x6) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4621, 0x3, 'wrr\x00', 0x0, 0x81, 0x73}, {@private=0xa010102, 0x4e23, 0x3, 0x1cb, 0x12d61, 0x12d5c}}, 0x44) syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200080c4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4m48.045041649s ago: executing program 8 (id=1918): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x18, 0x1, 0x0, "14a5593b595ccb9e289f1548f12ec9745f90084a013424cf6dc99d2466980300"}) 4m47.760749128s ago: executing program 8 (id=1922): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1a00040, &(0x7f0000002b40)={[{@shortname_winnt}, {@shortname_win95}, {@utf8no}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_strict}]}, 0x3, 0x34f, &(0x7f0000000100)="$eJzs3UFom+UbAPAn+9KkG+y/Hv4wFIRP75at4kFPLaODYS8qAfUgBtepNHXQYLA7NKsX8Sh4VC/ePOhxZxEU8ebBqwoyFQ+628DhK0m+NF+atOuEOIu/3yE8fd73yfu+zceXr1/bNy8tx8blubhy69bNmJ+vRHX5wnLcrsRCZDF0PSbVpuQAgOPhdkrxexo4YkllxlMCAGas//7/yulS5q0vDuufvPsDwLFX/Px/8rA+8wc1XJ3JlACAGZu4///IWHNt/Ff91dJfBQAAx9Wzz7/w1MpaxDN5Ph+x+Xan0WnEk6P2lSvxWrRiPc7FmbgTMbhQ6D1U+o8XL62tnsvzvBs/LUSjV9FpRGx2O43BlcJK1q+vx/k4EwtFfXG1kVLKLn4YEXlfRFzv9sePzUqnMRenivG/OxXrsRR5/H+iPuLS2upSXjxBY3NY343YHd236M1/Mc7ENy/H1WjF5ejVDi9r1lZ3zuf5hbQ2Vt9p1Pv9Bg68AwIAAAAAAAAAAAAAAAAAAAAAAH/LYr5nYW//mzTav2dxcUp7f3+cQX2xP9DuYH+gVE+R0m9vPtp4J4ux/YH278/TaVTjxP1dOgAAAAAAAAAAAAAAAAAAAPxrtLdr0Wy11rfa29c2ykF3q719IiJ6mde/+uTzkzHZ5y5BtRij1JQXqWsbzZQNO6dsrE8RZL3Bh5mPb+zNuNynvreKqdOoH9zUap1++Mf3R5mHsuEz/znqk8X0BWb7plEONv83mNK9fKP2gqW79Pk+pXRQ+c6Lk1VRiaje+wt3eJB6wZc3X33gsfbZx/uZz1JPJaI3Xnz0y0az1Y/6r2Btq30nbTSLr6cfbAcHWen4qcQgqJSPhOph5bvjmWb27a/PPfju10cbPZUzb0zpkw2W8+n+ptog6E1zX9PJaWPNTTn4ZxCc/WC5eWPnh5+PWlU6SfTOA+9lMzwLAQAAAAAAAAAAAAAAAAAAMfbv8cNM8an8c4dVPfH07GcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+c0ef/l4LdicxRgj+6MdlUX99qR9Tu9zIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiP+ysAAP//YcpqDg==") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 4m44.804215992s ago: executing program 8 (id=1924): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x2e, 0x1, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340), &(0x7f00000003c0), 0x0}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) setreuid(0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x35c3, 0x800, 0x8, 0x0, 0x0, r2}, 0x0, 0x0, &(0x7f0000000000)) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) syz_open_dev$sndctrl(&(0x7f0000000640), 0x0, 0x0) 4m43.648322179s ago: executing program 8 (id=1925): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 4m43.099211057s ago: executing program 8 (id=1927): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000500)="ad02da73b0bf2981ebf3577526b5cfa18e81f870dccda555138093a43c6867ffa9be67400f66d8a6e5d265211d764a4ca96601ea5590caf651834ea34ceb47a0b3f8aefb554df8ebbb27311ab3fedd433d2cf8c4c3", 0x55, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 4m39.86860691s ago: executing program 8 (id=1934): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) r0 = syz_io_uring_setup(0x34b6, &(0x7f00000005c0)={0x0, 0xc3b1, 0x800, 0x3, 0x2e2, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 4m39.616460279s ago: executing program 37 (id=1934): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) r0 = syz_io_uring_setup(0x34b6, &(0x7f00000005c0)={0x0, 0xc3b1, 0x800, 0x3, 0x2e2, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 4m32.560166184s ago: executing program 7 (id=1959): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x3, 0x90001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4m32.436321398s ago: executing program 7 (id=1960): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10000, &(0x7f00000003c0)={[{@resgid}, {}, {@grpquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3008409, 0x0, 0x4, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 4m30.646824165s ago: executing program 7 (id=1968): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@user_xattr}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6a) 4m29.104923375s ago: executing program 7 (id=1973): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 4m27.877968184s ago: executing program 7 (id=1976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="880000000001010400000000141a0000020000000800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e801400018008000100ac1414bb080002007f0000010c00"], 0x88}}, 0x0) 4m25.776678671s ago: executing program 7 (id=1982): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000), 0x0, &(0x7f00000004c0), 0x8002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4084) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) 4m24.605910959s ago: executing program 38 (id=1982): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000), 0x0, &(0x7f00000004c0), 0x8002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4084) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) 29.951283901s ago: executing program 2 (id=2898): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 29.462906087s ago: executing program 2 (id=2902): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x11, 0x1a, r1, 0x1, 0x6, 0x6, @random="0ef997e9cedb"}, 0x14) 27.688655542s ago: executing program 2 (id=2908): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.47215042s ago: executing program 2 (id=2914): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001740)='./file5\x00', 0x8000, 0x10) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x56159817211d7953, &(0x7f0000002500)) 27.256350586s ago: executing program 2 (id=2915): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 26.160717301s ago: executing program 2 (id=2920): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000001b00)=""/245, &(0x7f0000000000)=0xf5) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000001080)={0x80000000, 0x0, &(0x7f0000000480)}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x8, "3d323620ff9e6cd4adfc7eb5b6235f5ef9ef467def614c73539bbc9f126216fd", 0x2, 0x5e, 0x3, 0x370f0691b8bda556, 0x10, 0x2}) 5.827279265s ago: executing program 9 (id=2996): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 4.849599816s ago: executing program 1 (id=2999): shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x604, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x0, 0x1}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5d8, 0x2, [@TCA_BPF_ACT={0x5d4, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x1c8, 0x0, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32031dc5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xa4, 0x8, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0xfffffff7, 0xffffffffcffffffd, 0x1, 0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x55, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1e4, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x5, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x7, 0xd}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x2, 0x10001, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x1, 0x3, 0xfd30, 0x1}, @dev={0xac, 0x14, 0x14, 0x41}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @local, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x1, 0x3be6f802}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x6, 0xd}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x2b, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xa4, 0x9, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x468, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1001}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x1, 0x6, 0x6a}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x604}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.788873988s ago: executing program 3 (id=3000): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000200001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) 4.611299034s ago: executing program 3 (id=3001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4000009d, 0x0, 0xfffffffffffff557}]}) 4.588981104s ago: executing program 9 (id=3002): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x1, 0x1800009}, 0x18) 4.567506785s ago: executing program 1 (id=3003): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e002f88a87e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.328440563s ago: executing program 1 (id=3005): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) futex(&(0x7f00000002c0), 0xd, 0x2, &(0x7f0000000480), 0x0, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009"], 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe(&(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)}, 0x4000) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x10e, 0x4) openat$mice(0xffffff9c, &(0x7f0000000040), 0x167342) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r4, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x8, 0x0, 0x0}}, 0x10) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) 4.288352184s ago: executing program 9 (id=3006): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x100c, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2a, 0x2, 0x0, "d52b3d000400fa44966262631e8ac11eff00000000000000000000000100"}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xde, &(0x7f0000000040)=0xf2f, 0x4) r1 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 4.176782477s ago: executing program 3 (id=3008): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.987326823s ago: executing program 9 (id=3010): r0 = syz_open_dev$evdev(&(0x7f0000001740), 0x2, 0x400) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000001780)=""/120) 3.829911199s ago: executing program 3 (id=3011): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) 3.652667334s ago: executing program 9 (id=3012): shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x604, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x0, 0x1}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5d8, 0x2, [@TCA_BPF_ACT={0x5d4, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x1c8, 0x0, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32031dc5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xa4, 0x8, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0xfffffff7, 0xffffffffcffffffd, 0x1, 0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x55, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1e4, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x5, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x7, 0xd}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x2, 0x10001, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x1, 0x3, 0xfd30, 0x1}, @dev={0xac, 0x14, 0x14, 0x41}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @local, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x1, 0x3be6f802}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x6, 0xd}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x2b, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xa4, 0x9, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x468, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1001}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x1, 0x6, 0x6a}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x604}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.608460715s ago: executing program 3 (id=3013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x237c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.459303612s ago: executing program 1 (id=3015): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f00000003c0)=['\x00'], 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1c2) 1.934422868s ago: executing program 0 (id=3019): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0)=@x86={0x4, 0xe, 0xf3, 0x0, 0x1, 0x7, 0x7, 0x41, 0x3, 0xb, 0x7, 0x38, 0x0, 0x3, 0x5, 0x8, 0xfc, 0x0, 0x5, '\x00', 0x1, 0x1}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x70003, 0x0, {[0x1, 0x1f8, 0x3, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) 1.749682794s ago: executing program 0 (id=3020): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.704540996s ago: executing program 1 (id=3021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0xa6, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.478135903s ago: executing program 0 (id=3022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x40dc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000040) 1.370165796s ago: executing program 0 (id=3023): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0xa00, 0xa0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x0, 0x8}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x6ae, 0x400009, 0x46, 0x0, 0x17, 0x200, 0x1, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(&(0x7f0000000000), 0xfe7, 0x40801) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 235.498423ms ago: executing program 0 (id=3024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0x17, 0x6, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 44.816358ms ago: executing program 9 (id=3025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x41, 0x0, 0xffff}, {0x6, 0x0, 0x0, 0x4}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 31.617319ms ago: executing program 1 (id=3026): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 17.545489ms ago: executing program 0 (id=3027): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 0s ago: executing program 3 (id=3028): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r4) kernel console output (not intermixed with test programs): ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.334740][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.341919][ T7534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.357494][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 748.411982][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 748.421403][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 748.455551][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 748.483957][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 748.530335][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 748.554159][ T4355] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 748.584028][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 748.594548][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.628218][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 748.661131][T12550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.682659][T12550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 748.696632][ T4325] tipc: Node number set to 11578026 [ 748.702232][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 748.718666][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2024'. [ 748.734185][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 748.785840][ T4355] usb 10-1: config 0 has an invalid interface number: 120 but max is 0 [ 748.801599][ T4355] usb 10-1: config 0 has no interface number 0 [ 748.821248][ T4355] usb 10-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 748.858422][ T4355] usb 10-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 748.884983][ T4355] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.924378][ T4355] usb 10-1: config 0 descriptor?? [ 749.260034][T12799] blktrace: Concurrent blktraces are not allowed on sg0 [ 749.456635][ T4292] Bluetooth: hci2: command 0x0c1a tx timeout [ 749.686626][ T4292] Bluetooth: hci4: command 0x0c1a tx timeout [ 749.766858][ T4292] Bluetooth: hci3: command 0x0c1a tx timeout [ 749.846607][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 750.504556][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 750.543837][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 750.830242][T12550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.248699][ T128] usb 10-1: USB disconnect, device number 5 [ 751.312034][T12809] overlayfs: failed to resolve './file1': -2 [ 751.318590][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 751.319231][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 751.351134][T12550] device veth0_vlan entered promiscuous mode [ 751.364470][T12550] device veth1_vlan entered promiscuous mode [ 751.387340][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 751.395746][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 751.409737][T12809] overlayfs: failed to resolve './file1': -2 [ 751.433871][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 751.455654][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 751.471635][T12550] device veth0_macvtap entered promiscuous mode [ 751.498205][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 751.517580][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 751.525492][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 751.568572][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 751.611629][T12550] device veth1_macvtap entered promiscuous mode [ 751.642554][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 751.666537][ T4322] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 751.674331][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.696382][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.720682][T12550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.743985][T12820] loop1: detected capacity change from 0 to 1024 [ 751.772654][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 751.810446][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 751.819460][T12820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 751.838154][T12550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.849297][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 751.866581][T12550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.878338][T12550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.891197][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 751.910877][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 751.926994][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 751.934122][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 751.965243][T12820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 751.989026][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 752.034999][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 752.054925][ T4322] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 752.065233][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 752.073162][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 752.104135][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.110130][T12550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.121643][T12550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.130678][ T4322] usb 4-1: Product: syz [ 752.135472][ T4322] usb 4-1: Manufacturer: syz [ 752.150607][ T4322] usb 4-1: SerialNumber: syz [ 752.162894][T12550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.174395][T12550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.175981][ T4322] usb 4-1: config 0 descriptor?? [ 752.208919][T12343] EXT4-fs (loop1): unmounting filesystem. [ 752.386238][ T4792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.431516][ T4792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.522742][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 752.632230][ T4792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.791036][ T4322] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 752.858477][ T4792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.968659][T12808] 9pnet: Could not find request transport: rdmR [ 753.254611][ T4322] usb 4-1: USB disconnect, device number 29 [ 753.259348][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 754.082797][ T128] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 754.243281][T12877] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 754.267975][ T128] usb 10-1: config 0 has an invalid interface number: 120 but max is 0 [ 754.288833][ T128] usb 10-1: config 0 has no interface number 0 [ 754.304979][ T128] usb 10-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 754.326739][ T128] usb 10-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 754.344309][ T128] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.391044][ T128] usb 10-1: config 0 descriptor?? [ 754.653739][T12887] 9pnet_virtio: no channels available for device syz [ 754.828598][T12891] blktrace: Concurrent blktraces are not allowed on sg0 [ 756.403032][T12898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2047'. [ 756.640041][T12904] loop3: detected capacity change from 0 to 1024 [ 756.732257][T12904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 756.758595][T12904] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.076671][ T4325] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 757.099087][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 757.268675][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 757.305623][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 757.325265][T12924] loop3: detected capacity change from 0 to 512 [ 757.352890][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 757.385723][T12924] EXT4-fs: Ignoring removed i_version option [ 757.433467][T12924] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 757.454120][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 757.508178][ T4325] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 757.531190][T12924] EXT4-fs (loop3): 1 truncate cleaned up [ 757.538385][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.550942][T12924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 757.560511][ T4325] usb 1-1: Product: syz [ 757.569755][ T4325] usb 1-1: Manufacturer: syz [ 757.574752][ T4325] usb 1-1: SerialNumber: syz [ 757.670510][ T4325] usb 1-1: config 0 descriptor?? [ 758.197770][ T128] usb 10-1: USB disconnect, device number 6 [ 758.296827][ T4325] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 758.309343][T12932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2052'. [ 758.319532][T12932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2052'. [ 758.493958][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 758.534655][ T7] usb 1-1: USB disconnect, device number 20 [ 758.666728][T12910] 9pnet: Could not find request transport: rdmR [ 758.920229][T12959] 9pnet_virtio: no channels available for device syz [ 761.166666][ T4354] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 761.407848][ T4354] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 761.442984][ T4354] usb 4-1: config 0 has no interface number 0 [ 761.648682][ T4354] usb 4-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.973169][ T4354] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 761.983292][ T4354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.993702][ T4354] usb 4-1: config 0 descriptor?? [ 762.172456][T13022] 9pnet_virtio: no channels available for device syz [ 762.541365][T13033] blktrace: Concurrent blktraces are not allowed on sg0 [ 763.817250][T13025] loop0: detected capacity change from 0 to 4096 [ 763.872341][T13025] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 763.949218][ T14] usb 4-1: USB disconnect, device number 30 [ 764.851267][T12550] EXT4-fs (loop0): unmounting filesystem. [ 765.779127][T13070] binder: 13068:13070 ioctl c0306201 0 returned -14 [ 766.349736][T13085] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 766.640834][T13092] overlayfs: failed to clone upperpath [ 767.980219][ T32] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.293840][ T32] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.446106][T13119] Bluetooth: MGMT ver 1.22 [ 768.608029][ T32] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.042145][ T32] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.118844][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 769.149106][T13146] tipc: Resetting bearer [ 769.172574][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 769.190536][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 769.251459][T13149] team0: Unable to change to the same mode the team is in [ 769.368545][T13146] tipc: Enabling of bearer rejected, already enabled [ 769.822749][ T32] tipc: Disabling bearer [ 769.831672][ T32] tipc: Left network mode [ 769.918947][T13153] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 769.925052][T13153] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 769.932892][T13153] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 769.950419][T13153] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 769.962198][T13153] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 769.979371][T13153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 769.994422][T13153] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 770.024665][T13153] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 770.077054][T13174] fuse: Bad value for 'fd' [ 770.271705][T13176] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2107'. [ 770.297107][T13176] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2107'. [ 770.437201][T13176] loop9: detected capacity change from 0 to 512 [ 770.516363][T13176] EXT4-fs (loop9): 1 truncate cleaned up [ 770.553305][T13176] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 770.890759][T10137] EXT4-fs (loop9): unmounting filesystem. [ 770.981723][ T27] audit: type=1326 audit(1780745673.724:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.1.2110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17af79ce59 code=0x7ffc0000 [ 771.134966][ T27] audit: type=1326 audit(1780745673.754:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.1.2110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17af79ce59 code=0x7ffc0000 [ 771.236558][ T27] audit: type=1326 audit(1780745673.764:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.1.2110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17af79ce59 code=0x7ffc0000 [ 771.390034][ T27] audit: type=1326 audit(1780745673.764:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.1.2110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17af79ce59 code=0x7ffc0000 [ 771.526642][ T4292] Bluetooth: hci2: command 0x0c1a tx timeout [ 771.537761][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 771.546334][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 771.568294][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 771.613334][T13207] device bridge_slave_0 left promiscuous mode [ 771.630441][T13219] loop9: detected capacity change from 0 to 256 [ 771.645445][T13219] net_ratelimit: 1990 callbacks suppressed [ 771.645530][T13219] netlink: get zone limit has 8 unknown bytes [ 771.666890][T13207] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.706912][T13207] device bridge_slave_1 left promiscuous mode [ 771.717255][T13207] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.765926][T13207] bond0: (slave bond_slave_0): Releasing backup interface [ 771.837827][T13207] bond0: (slave bond_slave_1): Releasing backup interface [ 771.926774][ T4291] Bluetooth: hci4: command 0x0c1a tx timeout [ 771.952654][T13207] team0: Port device team_slave_0 removed [ 771.972401][T13207] team0: Port device team_slave_1 removed [ 771.995300][T13207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.013809][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 772.013818][ T4291] Bluetooth: hci3: command 0x0c1a tx timeout [ 772.036399][T13207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.078369][T13207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.087137][T13207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.105228][T13214] team0: Mode changed to "activebackup" [ 772.110778][T13236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2122'. [ 772.121276][T13236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2122'. [ 772.199397][T13220] device vlan0 entered promiscuous mode [ 772.225916][T13237] fuse: Bad value for 'fd' [ 772.250543][T13237] loop0: detected capacity change from 0 to 512 [ 772.252046][T13216] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 772.281139][T13221] tipc: Started in network mode [ 772.286221][T13221] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 772.308357][T13216] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 772.320142][T13221] tipc: Enabled bearer , priority 0 [ 772.324344][T13237] EXT4-fs (loop0): 1 truncate cleaned up [ 772.328761][T13216] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 772.356621][T13237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 772.368943][T13216] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 772.575062][T13246] loop3: detected capacity change from 0 to 256 [ 772.595997][T12550] EXT4-fs (loop0): unmounting filesystem. [ 772.627240][T13246] FAT-fs (loop3): Unrecognized mount option "'‡·v/Œ>ý¶®u”ôrodir" or missing value [ 773.104460][T13260] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 773.225448][T13263] loop0: detected capacity change from 0 to 1024 [ 773.294889][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'. [ 773.330174][T13263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2129'. [ 773.444738][ T32] device hsr_slave_0 left promiscuous mode [ 773.491886][ T32] device hsr_slave_1 left promiscuous mode [ 773.977199][ T32] device veth1_macvtap left promiscuous mode [ 774.010148][ T32] device veth0_macvtap left promiscuous mode [ 774.066053][ T32] device veth1_vlan left promiscuous mode [ 774.269293][ T4292] Bluetooth: hci2: command 0x0c1a tx timeout [ 774.334270][ T4291] Bluetooth: hci4: command 0x0c1a tx timeout [ 774.406672][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 774.406699][ T4291] Bluetooth: hci3: command 0x0c1a tx timeout [ 775.700614][T13314] loop3: detected capacity change from 0 to 1024 [ 775.736124][T13314] EXT4-fs: Ignoring removed nobh option [ 775.747319][T13314] EXT4-fs: Ignoring removed orlov option [ 775.838525][T13314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 775.866065][T13319] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2137'. [ 775.928548][T13319] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2137'. [ 775.958173][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 776.028722][T13321] loop9: detected capacity change from 0 to 512 [ 776.058972][T13321] EXT4-fs (loop9): 1 truncate cleaned up [ 776.064688][T13321] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 776.213588][T10137] EXT4-fs (loop9): unmounting filesystem. [ 776.389862][T13335] loop9: detected capacity change from 0 to 256 [ 776.397185][T13335] FAT-fs (loop9): Unrecognized mount option "'‡·v/Œ>ý¶®u”ôrodir" or missing value [ 776.479350][T11695] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 776.896614][ T4291] Bluetooth: hci0: command 0x0405 tx timeout [ 778.612990][ T32] bond0 (unregistering): Released all slaves [ 778.704125][ T4355] tipc: Node number set to 11578026 [ 778.975966][T13365] loop0: detected capacity change from 0 to 1024 [ 779.020994][T13365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 779.205995][T13365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 779.896220][T13379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2153'. [ 779.905816][T13379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2153'. [ 779.947452][T12550] EXT4-fs (loop0): unmounting filesystem. [ 779.986018][T13379] loop1: detected capacity change from 0 to 512 [ 780.021697][T13379] EXT4-fs (loop1): 1 truncate cleaned up [ 780.029906][T13379] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 780.043286][T13379] netlink: 'syz.1.2153': attribute type 5 has an invalid length. [ 780.194402][T12343] EXT4-fs (loop1): unmounting filesystem. [ 782.462592][T13417] loop3: detected capacity change from 0 to 1024 [ 782.505143][T13421] loop1: detected capacity change from 0 to 256 [ 782.550659][T13417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 782.566162][T13423] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 782.780374][T13421] FAT-fs (loop1): Directory bread(block 64) failed [ 782.822352][T13417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 782.837197][T13421] FAT-fs (loop1): Directory bread(block 65) failed [ 782.893176][T13421] FAT-fs (loop1): Directory bread(block 66) failed [ 782.934372][T13421] FAT-fs (loop1): Directory bread(block 67) failed [ 782.956262][T13421] FAT-fs (loop1): Directory bread(block 68) failed [ 782.989431][T13421] FAT-fs (loop1): Directory bread(block 69) failed [ 783.004472][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 783.020524][T13421] FAT-fs (loop1): Directory bread(block 70) failed [ 783.145406][T13421] FAT-fs (loop1): Directory bread(block 71) failed [ 783.243196][T13421] FAT-fs (loop1): Directory bread(block 72) failed [ 783.280924][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 783.288536][T13421] FAT-fs (loop1): Directory bread(block 73) failed [ 783.289717][T13433] tipc: Resetting bearer [ 783.303078][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 783.311968][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 783.362815][T13435] team0: Unable to change to the same mode the team is in [ 783.441253][T13435] tipc: Enabling of bearer rejected, already enabled [ 783.495740][T13439] binder: 13438:13439 ioctl c0306201 0 returned -14 [ 784.102334][T13455] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 784.112527][T13433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 784.118701][T13433] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 784.133414][T13433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 784.236775][T13433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 784.555218][T13468] loop3: detected capacity change from 0 to 1024 [ 784.570346][T13468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 784.768136][T13468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 784.885993][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 785.816680][ T4291] Bluetooth: hci2: command 0x0c1a tx timeout [ 786.176743][ T4291] Bluetooth: hci3: command 0x0c1a tx timeout [ 786.187786][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 786.256703][ T4291] Bluetooth: hci0: command 0x0c1a tx timeout [ 786.639886][T13494] binder: 13493:13494 ioctl c0306201 0 returned -14 [ 786.817486][T13499] fuse: Bad value for 'fd' [ 787.194948][T13511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2188'. [ 787.224876][T13511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2188'. [ 787.242732][T13515] device syzkaller0 entered promiscuous mode [ 787.316952][T13511] loop1: detected capacity change from 0 to 512 [ 787.454640][T13511] EXT4-fs (loop1): 1 truncate cleaned up [ 787.466746][T13511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 787.527169][T13511] netlink: 'syz.1.2188': attribute type 5 has an invalid length. [ 788.066400][T12343] EXT4-fs (loop1): unmounting filesystem. [ 788.532267][T13534] binder: 13532:13534 ioctl c0306201 0 returned -14 [ 788.681303][T13544] loop3: detected capacity change from 0 to 128 [ 788.810022][T13544] syz.3.2198: attempt to access beyond end of device [ 788.810022][T13544] loop3: rw=2049, sector=145, nr_sectors = 168 limit=128 [ 789.120784][T13559] loop1: detected capacity change from 0 to 256 [ 789.154560][T13559] FAT-fs (loop1): Unrecognized mount option "'‡·v/Œ>ý¶®u”ôrodir" or missing value [ 791.037568][T13580] loop3: detected capacity change from 0 to 512 [ 791.065487][T13580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 791.092059][T13580] EXT4-fs (loop3): Test dummy encryption mode enabled [ 791.098967][T13580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 791.137444][T13580] EXT4-fs error (device loop3): __ext4_iget:5102: inode #15: block 1803188595: comm syz.3.2209: invalid block [ 791.150382][T13580] EXT4-fs (loop3): Remounting filesystem read-only [ 791.159925][T13580] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2209: couldn't read orphan inode 15 (err -117) [ 791.185209][T13580] EXT4-fs (loop3): Remounting filesystem read-only [ 791.202256][T13580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 791.264867][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 797.695230][T13649] loop3: detected capacity change from 0 to 128 [ 797.761182][T13649] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 798.036139][T13660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 798.382995][T13660] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 799.587549][T13673] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 799.955977][T13691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2234'. [ 799.965217][T13691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2234'. [ 800.124214][T13691] loop3: detected capacity change from 0 to 512 [ 800.216753][ T4322] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 800.218576][T13691] EXT4-fs (loop3): 1 truncate cleaned up [ 800.230220][T13691] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 800.272310][T13691] netlink: 'syz.3.2234': attribute type 5 has an invalid length. [ 800.306394][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 800.418423][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 800.437363][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 800.457547][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 800.483149][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 800.507148][ T4322] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 800.516293][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.536848][ T4322] usb 2-1: Product: syz [ 800.541182][ T4322] usb 2-1: Manufacturer: syz [ 800.546007][ T4322] usb 2-1: SerialNumber: syz [ 800.564359][ T4322] usb 2-1: config 0 descriptor?? [ 800.708950][T13706] device syzkaller0 entered promiscuous mode [ 800.912636][ T4322] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 801.134238][T13690] 9pnet: Could not find request transport: rdmR [ 801.134810][ T4322] usb 2-1: USB disconnect, device number 13 [ 801.257571][T13727] netlink: 'syz.9.2242': attribute type 9 has an invalid length. [ 801.461451][T13736] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 801.524106][T13736] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 801.873697][T13753] loop9: detected capacity change from 0 to 1024 [ 801.915715][T13753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 802.009260][T13755] loop0: detected capacity change from 0 to 2048 [ 802.028352][T13753] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 802.112502][T13755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 802.229543][T10137] EXT4-fs (loop9): unmounting filesystem. [ 802.457762][T13764] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 802.474805][T13764] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 802.487647][T13764] EXT4-fs (loop0): This should not happen!! Data will be lost [ 802.487647][T13764] [ 802.497463][T13764] EXT4-fs (loop0): Total free blocks count 0 [ 802.503546][T13764] EXT4-fs (loop0): Free/Dirty block details [ 802.509755][T13764] EXT4-fs (loop0): free_blocks=2415919504 [ 802.516035][T13764] EXT4-fs (loop0): dirty_blocks=48 [ 802.521460][T13764] EXT4-fs (loop0): Block reservation details [ 802.527558][T13764] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 802.949314][T12550] EXT4-fs (loop0): unmounting filesystem. [ 802.992852][T13766] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2247'. [ 803.026148][T13766] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2247'. [ 803.087463][T13771] device syzkaller0 entered promiscuous mode [ 803.147424][T13766] loop9: detected capacity change from 0 to 512 [ 803.237324][T13766] EXT4-fs (loop9): 1 truncate cleaned up [ 803.243010][T13766] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 803.358890][T13766] netlink: 'syz.9.2247': attribute type 5 has an invalid length. [ 803.480679][T13791] loop1: detected capacity change from 0 to 256 [ 803.499660][T13791] FAT-fs (loop1): Unrecognized mount option "'‡·v/Œ>ý¶®u”ôrodir" or missing value [ 803.514768][T10137] EXT4-fs (loop9): unmounting filesystem. [ 804.763168][T13799] loop0: detected capacity change from 0 to 1024 [ 804.825254][T13808] netlink: 'syz.2.2261': attribute type 31 has an invalid length. [ 804.849706][T13799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 804.993868][T13799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 805.009564][T13808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2261'. [ 805.104146][T13808] device macvlan3 entered promiscuous mode [ 805.258239][T12550] EXT4-fs (loop0): unmounting filesystem. [ 805.269874][T13829] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[12343] was attempted by ""[13829] [ 805.412387][T13834] device syzkaller1 entered promiscuous mode [ 805.595040][T13844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2266'. [ 805.796814][ T4325] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 805.978240][ T4325] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 805.989973][ T4325] usb 2-1: config 0 has no interface number 0 [ 806.013817][ T4325] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 806.061221][ T4325] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 806.081025][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.094680][ T4325] usb 2-1: config 0 descriptor?? [ 806.167071][ T14] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 806.186722][T13870] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2277'. [ 806.207289][T13873] loop0: detected capacity change from 0 to 1024 [ 806.249029][T13873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 806.321118][T13873] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 806.358111][ T14] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 806.369582][ T14] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 806.383584][ T14] usb 10-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 806.394051][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.408773][ T14] usb 10-1: Product: syz [ 806.413065][ T14] usb 10-1: Manufacturer: syz [ 806.423532][ T14] usb 10-1: SerialNumber: syz [ 806.538178][T13882] blktrace: Concurrent blktraces are not allowed on sg0 [ 806.597601][ T4325] usb 2-1: USB disconnect, device number 14 [ 806.671323][T12550] EXT4-fs (loop0): unmounting filesystem. [ 806.738753][ T14] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 806.869243][ T14] usb 10-1: USB disconnect, device number 7 [ 806.888155][T13892] Cannot find set identified by id 0 to match [ 807.239596][T13640] udevd[13640]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.304186][T13940] input: syz0 as /devices/virtual/input/input22 [ 807.492048][T13916] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 807.794155][T13945] loop1: detected capacity change from 0 to 256 [ 808.111305][T13945] FAT-fs (loop1): Directory bread(block 64) failed [ 808.140746][T13945] FAT-fs (loop1): Directory bread(block 65) failed [ 808.145804][T13953] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2286'. [ 808.189145][T13945] FAT-fs (loop1): Directory bread(block 66) failed [ 808.229332][T13945] FAT-fs (loop1): Directory bread(block 67) failed [ 808.259810][T13945] FAT-fs (loop1): Directory bread(block 68) failed [ 808.306567][T13945] FAT-fs (loop1): Directory bread(block 69) failed [ 808.355097][T13945] FAT-fs (loop1): Directory bread(block 70) failed [ 808.364981][T13945] FAT-fs (loop1): Directory bread(block 71) failed [ 808.371880][T13945] FAT-fs (loop1): Directory bread(block 72) failed [ 808.375144][T13960] loop9: detected capacity change from 0 to 256 [ 808.385700][T13945] FAT-fs (loop1): Directory bread(block 73) failed [ 808.446681][T13960] FAT-fs (loop9): Directory bread(block 64) failed [ 808.484090][T13960] FAT-fs (loop9): Directory bread(block 65) failed [ 808.493858][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.493900][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.510550][T13960] FAT-fs (loop9): Directory bread(block 66) failed [ 808.517177][T13960] FAT-fs (loop9): Directory bread(block 67) failed [ 808.523769][T13960] FAT-fs (loop9): Directory bread(block 68) failed [ 808.530356][T13960] FAT-fs (loop9): Directory bread(block 69) failed [ 808.537249][T13960] FAT-fs (loop9): Directory bread(block 70) failed [ 808.543786][T13960] FAT-fs (loop9): Directory bread(block 71) failed [ 808.545947][T13964] loop0: detected capacity change from 0 to 1024 [ 808.550843][T13960] FAT-fs (loop9): Directory bread(block 72) failed [ 808.564540][T13960] FAT-fs (loop9): Directory bread(block 73) failed [ 808.617292][T13964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 808.699066][T13964] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 808.754171][T12550] EXT4-fs (loop0): unmounting filesystem. [ 808.932448][T13977] loop0: detected capacity change from 0 to 512 [ 808.944097][T13981] loop1: detected capacity change from 0 to 256 [ 808.968855][T13981] FAT-fs (loop1): Unrecognized mount option "'‡·v/Œ>ý¶®u”ôrodir" or missing value [ 809.282648][T13977] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.2293: bad orphan inode 11862016 [ 809.332705][T13977] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 809.421580][T13977] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.251152][T14002] loop3: detected capacity change from 0 to 512 [ 810.286280][T14002] EXT4-fs: Mount option(s) incompatible with ext3 [ 810.354787][T12550] EXT4-fs (loop0): unmounting filesystem. [ 811.197308][T14005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2301'. [ 811.393580][T14009] fuse: Unknown parameter 'gr00000000000000000000' [ 811.885887][T14013] loop1: detected capacity change from 0 to 1024 [ 811.945869][T14013] EXT4-fs: Ignoring removed nomblk_io_submit option [ 812.002310][T14019] loop0: detected capacity change from 0 to 512 [ 812.049753][T14013] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 812.159341][T14019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 812.197832][T14019] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.226041][T12343] EXT4-fs (loop1): unmounting filesystem. [ 812.414841][ T14] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 812.470283][T14032] loop1: detected capacity change from 0 to 512 [ 812.487305][T12550] EXT4-fs (loop0): unmounting filesystem. [ 812.561828][T14032] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 812.627081][ T14] usb 10-1: device descriptor read/all, error -71 [ 812.636589][T14032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 812.645645][T14032] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.664780][T14036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 812.729366][T14036] tipc: Resetting bearer [ 812.736036][T14036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 812.847157][T14036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 813.402310][T14039] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 813.453796][T14041] team0: Unable to change to the same mode the team is in [ 813.467011][T14049] tipc: Enabling of bearer rejected, already enabled [ 813.495109][T12343] EXT4-fs (loop1): unmounting filesystem. [ 813.694975][T14047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 813.703695][T14047] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 813.714205][T14047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 813.736963][T14047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 813.950952][T14055] loop0: detected capacity change from 0 to 128 [ 813.993665][T14055] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 814.005605][T14055] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 814.091384][T14060] loop3: detected capacity change from 0 to 256 [ 814.104268][T14060] FAT-fs (loop3): Unrecognized mount option "'‡·v/Œ>ý¶®u”ôrodir" or missing value [ 815.078046][T12550] EXT4-fs (loop0): unmounting filesystem. [ 815.143444][T14070] loop3: detected capacity change from 0 to 256 [ 815.231895][T14070] FAT-fs (loop3): Directory bread(block 64) failed [ 815.259739][T14073] loop1: detected capacity change from 0 to 2048 [ 815.266197][T14070] FAT-fs (loop3): Directory bread(block 65) failed [ 815.292068][T14070] FAT-fs (loop3): Directory bread(block 66) failed [ 815.358220][T14070] FAT-fs (loop3): Directory bread(block 67) failed [ 815.366304][T14073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 815.402303][T14073] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.416630][T14070] FAT-fs (loop3): Directory bread(block 68) failed [ 815.423264][T14070] FAT-fs (loop3): Directory bread(block 69) failed [ 815.429965][T14070] FAT-fs (loop3): Directory bread(block 70) failed [ 815.436608][T14070] FAT-fs (loop3): Directory bread(block 71) failed [ 815.443226][T14070] FAT-fs (loop3): Directory bread(block 72) failed [ 815.449930][T14070] FAT-fs (loop3): Directory bread(block 73) failed [ 815.526681][ T4291] Bluetooth: hci2: command 0x0c1a tx timeout [ 815.711431][T14092] loop3: detected capacity change from 0 to 512 [ 815.760500][T14092] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2321: inode has both inline data and extents flags [ 815.773900][ T14] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 815.781902][ T4291] Bluetooth: hci0: command 0x0c1a tx timeout [ 815.787953][ T4291] Bluetooth: hci3: command 0x0c1a tx timeout [ 815.793962][ T4291] Bluetooth: hci4: command 0x0c1a tx timeout [ 815.891773][T14092] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2321: couldn't read orphan inode 15 (err -117) [ 816.029208][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 816.038747][T14092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 816.085736][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 816.129366][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 816.163497][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 816.204701][ T4539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:15: bg 0: block 345: padding at end of block bitmap is not set [ 816.227101][ T14] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 816.265607][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.274470][ T14] usb 10-1: Product: syz [ 816.281127][ T14] usb 10-1: Manufacturer: syz [ 816.285831][ T14] usb 10-1: SerialNumber: syz [ 816.287774][ T4539] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 816.313288][ T14] usb 10-1: config 0 descriptor?? [ 816.333447][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 816.346782][ T4539] EXT4-fs (loop1): This should not happen!! Data will be lost [ 816.346782][ T4539] [ 816.374033][T14100] loop0: detected capacity change from 0 to 256 [ 816.405293][ T4539] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 631 with error 28 [ 816.423546][T14100] FAT-fs (loop0): Unrecognized mount option "'‡·v/Œ>ý¶®u”ôrodir" or missing value [ 816.558967][ T4539] EXT4-fs (loop1): This should not happen!! Data will be lost [ 816.558967][ T4539] [ 816.614331][ T4539] EXT4-fs (loop1): Total free blocks count 0 [ 816.620446][ T4539] EXT4-fs (loop1): Free/Dirty block details [ 816.626511][ T4539] EXT4-fs (loop1): free_blocks=0 [ 816.631581][ T4539] EXT4-fs (loop1): dirty_blocks=640 [ 816.637100][ T4539] EXT4-fs (loop1): Block reservation details [ 816.770186][ T14] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 816.779395][T14082] 9pnet: Could not find request transport: rdmR [ 816.941642][T14118] loop3: detected capacity change from 0 to 128 [ 816.993944][ T4354] usb 10-1: USB disconnect, device number 10 [ 817.019546][T14118] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 817.038782][T14118] ext4 filesystem being mounted at /542/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 817.244454][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 817.415746][T14131] loop0: detected capacity change from 0 to 256 [ 817.531421][T14131] FAT-fs (loop0): Directory bread(block 64) failed [ 817.584898][T14131] FAT-fs (loop0): Directory bread(block 65) failed [ 817.698299][T14131] FAT-fs (loop0): Directory bread(block 66) failed [ 817.812287][T14131] FAT-fs (loop0): Directory bread(block 67) failed [ 817.920895][T14131] FAT-fs (loop0): Directory bread(block 68) failed [ 818.023228][T14131] FAT-fs (loop0): Directory bread(block 69) failed [ 818.151883][T14131] FAT-fs (loop0): Directory bread(block 70) failed [ 818.260368][T14131] FAT-fs (loop0): Directory bread(block 71) failed [ 818.360307][T14131] FAT-fs (loop0): Directory bread(block 72) failed [ 818.466637][T14131] FAT-fs (loop0): Directory bread(block 73) failed [ 820.287223][T14186] loop0: detected capacity change from 0 to 128 [ 820.344774][T14186] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 820.376990][T14186] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 820.546971][T12550] EXT4-fs (loop0): unmounting filesystem. [ 820.570904][ T128] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 820.666531][ T4354] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 820.716277][T14199] loop0: detected capacity change from 0 to 256 [ 820.760595][T14199] FAT-fs (loop0): Directory bread(block 64) failed [ 820.775333][T14199] FAT-fs (loop0): Directory bread(block 65) failed [ 820.791896][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 820.816362][T14199] FAT-fs (loop0): Directory bread(block 66) failed [ 820.833525][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 820.846714][T14199] FAT-fs (loop0): Directory bread(block 67) failed [ 820.853330][T14199] FAT-fs (loop0): Directory bread(block 68) failed [ 820.870911][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 820.891902][T14199] FAT-fs (loop0): Directory bread(block 69) failed [ 820.901944][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 820.915969][T14199] FAT-fs (loop0): Directory bread(block 70) failed [ 820.936145][T14199] FAT-fs (loop0): Directory bread(block 71) failed [ 820.955526][ T128] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 820.972052][T14199] FAT-fs (loop0): Directory bread(block 72) failed [ 820.998247][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.015296][ T4354] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 821.026539][ T4354] usb 2-1: config 0 has no interface number 0 [ 821.027129][T14199] FAT-fs (loop0): Directory bread(block 73) failed [ 821.032641][ T4354] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 821.032681][ T4354] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 821.032702][ T4354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.070272][ T128] usb 4-1: Product: syz [ 821.072330][ T4354] usb 2-1: config 0 descriptor?? [ 821.108135][ T128] usb 4-1: Manufacturer: syz [ 821.166246][ T128] usb 4-1: SerialNumber: syz [ 821.318055][ T128] usb 4-1: config 0 descriptor?? [ 821.788251][ T128] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 821.995793][T14187] 9pnet: Could not find request transport: rdmR [ 822.036264][ T128] usb 4-1: USB disconnect, device number 31 [ 822.169038][T14219] blktrace: Concurrent blktraces are not allowed on sg0 [ 822.307114][ T4354] usb 2-1: USB disconnect, device number 15 [ 822.431252][T14225] loop0: detected capacity change from 0 to 512 [ 822.474727][T14225] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.2355: bad orphan inode 11862016 [ 822.556210][T14225] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 822.582598][T14225] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.850534][T12550] EXT4-fs (loop0): unmounting filesystem. [ 823.251435][T14248] loop1: detected capacity change from 0 to 256 [ 823.266020][T14248] FAT-fs (loop1): Unrecognized mount option "'‡·v/Œ>ý¶®u”ôrodir" or missing value [ 824.265774][T14254] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 826.577496][T14271] loop0: detected capacity change from 0 to 256 [ 827.095994][T14271] FAT-fs (loop0): Directory bread(block 64) failed [ 827.226614][T14271] FAT-fs (loop0): Directory bread(block 65) failed [ 827.313489][T14271] FAT-fs (loop0): Directory bread(block 66) failed [ 827.365685][T14271] FAT-fs (loop0): Directory bread(block 67) failed [ 827.375266][T14271] FAT-fs (loop0): Directory bread(block 68) failed [ 827.392856][T14271] FAT-fs (loop0): Directory bread(block 69) failed [ 827.413457][T14271] FAT-fs (loop0): Directory bread(block 70) failed [ 827.424143][ T4291] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 827.436913][T14271] FAT-fs (loop0): Directory bread(block 71) failed [ 827.471002][T14271] FAT-fs (loop0): Directory bread(block 72) failed [ 827.538786][T14271] FAT-fs (loop0): Directory bread(block 73) failed [ 829.009327][T14308] device syzkaller0 entered promiscuous mode [ 829.221825][T14314] loop1: detected capacity change from 0 to 256 [ 829.575722][T14326] loop0: detected capacity change from 0 to 2048 [ 829.602064][T14326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 829.625713][T14326] ext4: Unknown parameter 'smackfshat' [ 829.850458][T14332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2382'. [ 831.158480][T14350] device syzkaller0 entered promiscuous mode [ 831.262089][T14357] loop9: detected capacity change from 0 to 256 [ 831.446861][ T4291] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 831.455684][ T4291] Bluetooth: hci3: Injecting HCI hardware error event [ 831.466979][ T4290] Bluetooth: hci3: hardware error 0x00 [ 831.562314][T14365] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2394'. [ 831.795398][T14375] loop9: detected capacity change from 0 to 512 [ 831.883004][T14375] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 831.922097][T14375] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 832.182141][ T128] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 832.968477][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 832.985880][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 833.038822][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 833.091767][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 833.139122][ T128] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 833.172441][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.306535][ T128] usb 4-1: Product: syz [ 833.311157][ T128] usb 4-1: Manufacturer: syz [ 833.315775][ T128] usb 4-1: SerialNumber: syz [ 833.378097][ T128] usb 4-1: config 0 descriptor?? [ 833.405376][T10137] EXT4-fs (loop9): unmounting filesystem. [ 833.504823][T14410] loop1: detected capacity change from 0 to 512 [ 833.512613][T14410] EXT4-fs: Ignoring removed orlov option [ 834.409561][ T4290] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 834.424474][T14410] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 834.597774][T14410] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.2404: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 834.649793][T14410] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2404: couldn't read orphan inode 16 (err -117) [ 834.695758][T14410] EXT4-fs (loop1): 1 orphan inode deleted [ 834.701641][T14410] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 835.418457][ T128] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 835.556668][T14373] 9pnet: Could not find request transport: rdmR [ 836.453994][T14430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2407'. [ 836.546823][T12343] EXT4-fs (loop1): unmounting filesystem. [ 836.637073][ T4325] usb 4-1: USB disconnect, device number 32 [ 837.121818][T14446] loop9: detected capacity change from 0 to 128 [ 837.199692][T14446] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 837.467126][T14446] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 837.939686][T14460] random: crng reseeded on system resumption [ 839.081865][T10137] EXT4-fs (loop9): unmounting filesystem. [ 840.653667][T14490] loop0: detected capacity change from 0 to 256 [ 840.706212][T14490] FAT-fs (loop0): Directory bread(block 64) failed [ 840.718563][T14490] FAT-fs (loop0): Directory bread(block 65) failed [ 840.737906][T14490] FAT-fs (loop0): Directory bread(block 66) failed [ 840.759329][T14490] FAT-fs (loop0): Directory bread(block 67) failed [ 840.771542][T14494] policy can only be matched on NF_INET_PRE_ROUTING [ 840.771559][T14494] unable to load match [ 840.777617][T14490] FAT-fs (loop0): Directory bread(block 68) failed [ 840.803509][T14490] FAT-fs (loop0): Directory bread(block 69) failed [ 840.827339][T14490] FAT-fs (loop0): Directory bread(block 70) failed [ 840.846680][ T4325] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 840.851156][T14490] FAT-fs (loop0): Directory bread(block 71) failed [ 840.878915][T14490] FAT-fs (loop0): Directory bread(block 72) failed [ 840.892906][T14490] FAT-fs (loop0): Directory bread(block 73) failed [ 841.038048][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 841.069627][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 841.100163][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 841.126281][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 841.149989][ T4325] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 841.181555][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.206648][ T4325] usb 2-1: Product: syz [ 841.210855][ T4325] usb 2-1: Manufacturer: syz [ 841.215475][ T4325] usb 2-1: SerialNumber: syz [ 841.246255][ T4325] usb 2-1: config 0 descriptor?? [ 842.700491][ T4325] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 842.926039][ T4325] usb 2-1: USB disconnect, device number 16 [ 842.944668][T14485] 9pnet: Could not find request transport: rdmR [ 842.978603][T14543] loop0: detected capacity change from 0 to 512 [ 843.017898][T14543] EXT4-fs: Ignoring removed bh option [ 843.061251][T14543] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.2437: corrupted in-inode xattr [ 843.111609][T14543] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2437: couldn't read orphan inode 15 (err -117) [ 843.125366][T14543] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 843.873106][T14558] loop9: detected capacity change from 0 to 512 [ 843.943057][T14558] EXT4-fs (loop9): 1 truncate cleaned up [ 844.010717][T12550] EXT4-fs (loop0): unmounting filesystem. [ 844.012599][T14558] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 844.180103][T14558] netlink: 'syz.9.2438': attribute type 4 has an invalid length. [ 844.273838][T14573] loop3: detected capacity change from 0 to 128 [ 844.310992][T14573] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 844.341108][T10137] EXT4-fs (loop9): unmounting filesystem. [ 845.367738][T14599] binder: 14594:14599 ioctl c0306201 200000000080 returned -14 [ 845.461480][T14599] binder: 14594:14599 ioctl c0306201 2000000003c0 returned -14 [ 846.266267][T14615] loop1: detected capacity change from 0 to 256 [ 846.543501][T14626] loop3: detected capacity change from 0 to 128 [ 846.622165][T14626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 846.643121][T14626] ext4 filesystem being mounted at /565/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 846.813183][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 847.025960][T14637] loop3: detected capacity change from 0 to 512 [ 847.108666][T14637] EXT4-fs (loop3): 1 truncate cleaned up [ 847.134644][T14637] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 847.190199][T14637] netlink: 'syz.3.2454': attribute type 4 has an invalid length. [ 847.262491][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 847.383225][T14651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 847.410631][T14651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 847.443694][T14651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 847.455279][T14651] device bridge_slave_0 left promiscuous mode [ 847.464311][T14651] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.497981][T14654] overlayfs: missing 'lowerdir' [ 847.503592][T14651] device bridge_slave_1 left promiscuous mode [ 847.519400][T14651] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.540487][T14651] bond0: (slave bond_slave_0): Releasing backup interface [ 847.577596][T14657] loop3: detected capacity change from 0 to 512 [ 847.594047][T14651] bond0: (slave bond_slave_1): Releasing backup interface [ 847.613546][T14657] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 847.660540][T14657] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 847.674797][T14661] loop1: detected capacity change from 0 to 256 [ 847.686843][T14651] team0: Port device team_slave_0 removed [ 847.716660][T14657] EXT4-fs (loop3): 1 truncate cleaned up [ 847.768231][T14657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 847.808249][T14651] team0: Port device team_slave_1 removed [ 847.855295][T14651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.889005][T14651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.909631][T14651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.939149][T14651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.977260][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 847.989510][T14671] loop1: detected capacity change from 0 to 128 [ 848.030475][T14671] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 848.069167][T14658] device vlan0 entered promiscuous mode [ 848.084996][T14671] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 848.151052][T14588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.193164][T14655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 848.200682][T14655] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 848.267890][T14655] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 848.287975][T14655] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 848.328858][T12343] EXT4-fs (loop1): unmounting filesystem. [ 848.370317][T14655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 848.574920][T14693] loop9: detected capacity change from 0 to 512 [ 848.701149][T14693] EXT4-fs (loop9): 1 truncate cleaned up [ 848.707263][T14693] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 848.742462][T14693] netlink: 'syz.9.2468': attribute type 4 has an invalid length. [ 849.648667][T10137] EXT4-fs (loop9): unmounting filesystem. [ 850.113354][T14732] loop1: detected capacity change from 0 to 128 [ 850.156311][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 850.166653][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout [ 850.173754][T14732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 850.199790][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 850.217334][T14732] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 850.325400][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 850.332927][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 850.406873][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout [ 850.414708][T14738] team0: Mode changed to "activebackup" [ 850.952507][T14740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 850.966110][T14740] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 851.041926][T14740] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 851.355049][T12343] EXT4-fs (loop1): unmounting filesystem. [ 851.549718][T14764] loop0: detected capacity change from 0 to 256 [ 851.579942][T14764] FAT-fs (loop0): Unrecognized mount option "'‡·v/Œ>ý¶®u”ôrodir" or missing value [ 852.486617][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout [ 852.527851][ T4290] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 852.775247][T14783] overlayfs: missing 'lowerdir' [ 852.875051][T14786] loop1: detected capacity change from 0 to 128 [ 852.976713][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 853.093369][T14786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 853.199741][T14786] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 853.650670][T14790] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 853.752997][T14796] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 853.780191][T14796] tipc: Resetting bearer [ 853.797657][T14796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 853.819638][T14796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 853.878385][T12343] EXT4-fs (loop1): unmounting filesystem. [ 853.884191][T14799] team0: Unable to change to the same mode the team is in [ 854.079318][T14809] fuse: Bad value for 'fd' [ 854.213922][T14812] loop1: detected capacity change from 0 to 256 [ 854.850867][T14802] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 854.866365][T14812] FAT-fs (loop1): Unrecognized mount option "'‡·v/Œ>ý¶®u”ôrodir" or missing value [ 854.876007][T14802] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 854.902463][T14802] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 855.622402][T14823] loop0: detected capacity change from 0 to 512 [ 855.743908][T14823] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 855.841449][T14823] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 856.206726][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout [ 856.737133][T12550] EXT4-fs (loop0): unmounting filesystem. [ 856.798456][T14842] loop1: detected capacity change from 0 to 128 [ 856.886681][ T4291] Bluetooth: hci4: command 0x0c1a tx timeout [ 856.948318][T14842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 856.966578][ T4291] Bluetooth: hci0: command 0x0c1a tx timeout [ 856.983396][T14842] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 856.999117][T14846] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 857.615269][T12343] EXT4-fs (loop1): unmounting filesystem. [ 857.733205][T14871] loop1: detected capacity change from 0 to 256 [ 857.771124][T14871] FAT-fs (loop1): Unrecognized mount option "'‡·v/Œ>ý¶®u”ôrodir" or missing value [ 858.766025][T14878] loop1: detected capacity change from 0 to 512 [ 858.978951][T14878] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 858.988986][T14878] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 859.029553][T14880] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2512'. [ 859.160223][T14892] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 859.849403][T12343] EXT4-fs (loop1): unmounting filesystem. [ 861.044326][T14919] netlink: 'syz.1.2522': attribute type 10 has an invalid length. [ 861.084765][T14919] tipc: Resetting bearer [ 864.389415][T14959] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 864.830287][T14966] loop9: detected capacity change from 0 to 512 [ 864.854492][T14966] EXT4-fs (loop9): 1 truncate cleaned up [ 864.861142][T14966] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 865.487151][T14966] netlink: 'syz.9.2536': attribute type 5 has an invalid length. [ 865.604796][T10137] EXT4-fs (loop9): unmounting filesystem. [ 865.811688][T14981] loop3: detected capacity change from 0 to 512 [ 865.881738][T14984] loop9: detected capacity change from 0 to 8 [ 865.944802][T14981] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 865.981864][T14981] ext4 filesystem being mounted at /580/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 866.146608][ T4324] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 866.779607][ T4324] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 866.798290][ T4324] usb 2-1: config 0 has no interface number 0 [ 866.814621][ T4324] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 866.836816][ T4324] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 866.846080][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.855836][ T4324] usb 2-1: config 0 descriptor?? [ 866.953431][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 867.148333][T14986] blktrace: Concurrent blktraces are not allowed on sg0 [ 867.165801][ T126] usb 2-1: USB disconnect, device number 17 [ 869.094792][T15025] loop9: detected capacity change from 0 to 512 [ 869.179879][T15025] EXT4-fs (loop9): 1 truncate cleaned up [ 869.189891][T15025] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 869.280696][T15025] netlink: 'syz.9.2548': attribute type 5 has an invalid length. [ 869.449026][T15040] loop3: detected capacity change from 0 to 512 [ 869.613359][T15042] overlayfs: missing 'workdir' [ 869.682882][T10137] EXT4-fs (loop9): unmounting filesystem. [ 869.815554][T15040] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 869.930656][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.943613][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.004763][T15040] ext4 filesystem being mounted at /584/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 870.750714][T15055] loop1: detected capacity change from 0 to 256 [ 871.069017][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 872.552185][T15094] loop9: detected capacity change from 0 to 512 [ 872.663182][T15094] EXT4-fs (loop9): 1 truncate cleaned up [ 872.685758][T15094] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 872.740802][T15102] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 872.771743][T15094] netlink: 'syz.9.2564': attribute type 5 has an invalid length. [ 872.797217][T15102] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 872.903418][T15111] loop3: detected capacity change from 0 to 512 [ 873.012286][T15111] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 873.013022][T10137] EXT4-fs (loop9): unmounting filesystem. [ 873.036836][T15111] ext4 filesystem being mounted at /588/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 874.765836][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 875.393927][T15137] loop0: detected capacity change from 0 to 128 [ 875.490253][T15137] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 875.562494][T15137] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 875.816555][ T4325] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 876.009202][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 876.042978][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 876.081872][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 876.104514][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 876.147644][ T4325] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 876.170627][T15172] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 876.181608][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.201757][ T4325] usb 4-1: Product: syz [ 876.205949][ T4325] usb 4-1: Manufacturer: syz [ 876.207088][T15172] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 876.256604][ T4325] usb 4-1: SerialNumber: syz [ 876.261818][T12550] EXT4-fs (loop0): unmounting filesystem. [ 876.307229][ T4325] usb 4-1: config 0 descriptor?? [ 876.351571][T15180] loop9: detected capacity change from 0 to 256 [ 877.122206][T15180] FAT-fs (loop9): Directory bread(block 64) failed [ 877.129351][ T4325] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 877.138458][T15180] FAT-fs (loop9): Directory bread(block 65) failed [ 877.170085][T15180] FAT-fs (loop9): Directory bread(block 66) failed [ 877.179816][T15187] overlayfs: failed to clone upperpath [ 877.190618][T15180] FAT-fs (loop9): Directory bread(block 67) failed [ 877.337339][T15180] FAT-fs (loop9): Directory bread(block 68) failed [ 877.430325][T15144] 9pnet: Could not find request transport: rdmR [ 877.436945][ T128] usb 4-1: USB disconnect, device number 33 [ 877.483487][T15180] FAT-fs (loop9): Directory bread(block 69) failed [ 877.516994][T15180] FAT-fs (loop9): Directory bread(block 70) failed [ 877.619123][T15180] FAT-fs (loop9): Directory bread(block 71) failed [ 877.659624][T15180] FAT-fs (loop9): Directory bread(block 72) failed [ 877.719284][T15180] FAT-fs (loop9): Directory bread(block 73) failed [ 877.757328][T15209] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2589'. [ 878.471591][T15206] loop3: detected capacity change from 0 to 512 [ 878.551114][T15206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 878.561342][T15206] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 878.572180][T15216] loop9: detected capacity change from 0 to 512 [ 878.587963][T15216] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 878.786747][T15216] EXT4-fs error (device loop9): mb_free_blocks:1839: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt. [ 878.816198][T15216] EXT4-fs (loop9): 1 truncate cleaned up [ 878.824190][T15216] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 879.466071][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 879.604534][T10137] EXT4-fs (loop9): unmounting filesystem. [ 880.131884][T15260] bridge0: port 1(wlan1) entered blocking state [ 880.139316][T15260] bridge0: port 1(wlan1) entered disabled state [ 880.155067][T15260] device wlan1 entered promiscuous mode [ 880.165105][T15260] bridge0: port 1(wlan1) entered blocking state [ 880.171760][T15260] bridge0: port 1(wlan1) entered forwarding state [ 880.390879][ T46] bridge0: port 1(wlan1) entered disabled state [ 881.249721][ T4354] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 881.448860][ T4354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 881.480647][ T4354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 881.525065][ T4354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 881.584288][ T4354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 881.644932][ T4354] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 881.716147][ T4354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.891996][ T4354] usb 1-1: Product: syz [ 881.947704][ T4354] usb 1-1: Manufacturer: syz [ 881.952358][ T4354] usb 1-1: SerialNumber: syz [ 882.258642][ T4354] usb 1-1: config 0 descriptor?? [ 882.910104][ T4354] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 883.504360][ T4354] usb 1-1: USB disconnect, device number 21 [ 883.838806][T15265] 9pnet: Could not find request transport: rdmR [ 883.943266][T15309] loop9: detected capacity change from 0 to 512 [ 884.035521][T15309] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 884.067968][T15309] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 885.058781][T10137] EXT4-fs (loop9): unmounting filesystem. [ 885.221774][T15336] overlayfs: missing 'lowerdir' [ 886.509087][T15353] device syzkaller0 entered promiscuous mode [ 886.549945][T15361] loop0: detected capacity change from 0 to 512 [ 886.588255][T15361] EXT4-fs: inline encryption not supported [ 886.594123][T15361] EXT4-fs: inline encryption not supported [ 886.636390][T15361] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 886.727667][T15361] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 886.745408][T15361] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2620: bg 0: block 248: padding at end of block bitmap is not set [ 886.777719][T15361] Quota error (device loop0): write_blk: dquota write failed [ 886.785487][T15361] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 886.798313][T15361] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.2620: Failed to acquire dquot type 1 [ 886.846881][T15361] EXT4-fs (loop0): 1 truncate cleaned up [ 886.854545][T15361] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 887.008226][T12550] EXT4-fs (loop0): unmounting filesystem. [ 887.184168][T15374] loop1: detected capacity change from 0 to 512 [ 887.188228][T15376] loop0: detected capacity change from 0 to 512 [ 887.214092][T15378] loop9: detected capacity change from 0 to 256 [ 887.273358][T15374] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 887.283445][T15378] FAT-fs (loop9): Directory bread(block 64) failed [ 887.312916][T15374] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 887.343936][T15378] FAT-fs (loop9): Directory bread(block 65) failed [ 887.374386][T15378] FAT-fs (loop9): Directory bread(block 66) failed [ 887.414613][T15378] FAT-fs (loop9): Directory bread(block 67) failed [ 887.573475][T15378] FAT-fs (loop9): Directory bread(block 68) failed [ 887.580650][T15378] FAT-fs (loop9): Directory bread(block 69) failed [ 887.587439][T15378] FAT-fs (loop9): Directory bread(block 70) failed [ 887.594075][T15378] FAT-fs (loop9): Directory bread(block 71) failed [ 887.602281][T15378] FAT-fs (loop9): Directory bread(block 72) failed [ 887.609631][T15378] FAT-fs (loop9): Directory bread(block 73) failed [ 888.166108][T15390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2626'. [ 888.311267][T12343] EXT4-fs (loop1): unmounting filesystem. [ 888.702434][T15404] loop0: detected capacity change from 0 to 256 [ 888.718346][T15400] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 888.752439][T15405] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 888.773711][T15405] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 888.804955][T15404] FAT-fs (loop0): Directory bread(block 64) failed [ 888.837644][T15404] FAT-fs (loop0): Directory bread(block 65) failed [ 888.867194][T15404] FAT-fs (loop0): Directory bread(block 66) failed [ 888.874964][T15404] FAT-fs (loop0): Directory bread(block 67) failed [ 888.906634][T15404] FAT-fs (loop0): Directory bread(block 68) failed [ 888.913331][T15404] FAT-fs (loop0): Directory bread(block 69) failed [ 888.927347][T15404] FAT-fs (loop0): Directory bread(block 70) failed [ 888.953078][T15404] FAT-fs (loop0): Directory bread(block 71) failed [ 888.982255][T15404] FAT-fs (loop0): Directory bread(block 72) failed [ 889.008784][T15404] FAT-fs (loop0): Directory bread(block 73) failed [ 889.214909][T15413] loop0: detected capacity change from 0 to 1024 [ 889.302559][T15413] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 889.318734][T15413] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.472691][T15419] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.2635: lblock 0 mapped to illegal pblock 0 (length 6) [ 889.521959][T15419] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 889.555173][T15419] EXT4-fs (loop0): This should not happen!! Data will be lost [ 889.555173][T15419] [ 890.588983][ T4391] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 890.606303][ T4391] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 890.618757][ T4391] EXT4-fs (loop0): This should not happen!! Data will be lost [ 890.618757][ T4391] [ 890.632164][T12550] EXT4-fs (loop0): unmounting filesystem. [ 890.721434][T15429] loop0: detected capacity change from 0 to 512 [ 890.805439][T15429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 890.824856][T15429] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 891.864159][T12550] EXT4-fs (loop0): unmounting filesystem. [ 892.691272][T15410] netlink: 'syz.2.2633': attribute type 5 has an invalid length. [ 893.003422][T15448] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 893.041263][T15448] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 893.090060][T15453] loop1: detected capacity change from 0 to 256 [ 893.195040][T15453] FAT-fs (loop1): Directory bread(block 64) failed [ 893.213133][T15453] FAT-fs (loop1): Directory bread(block 65) failed [ 893.243576][T15453] FAT-fs (loop1): Directory bread(block 66) failed [ 893.280580][T15453] FAT-fs (loop1): Directory bread(block 67) failed [ 893.333082][T15453] FAT-fs (loop1): Directory bread(block 68) failed [ 893.342098][T15453] FAT-fs (loop1): Directory bread(block 69) failed [ 893.363130][T15453] FAT-fs (loop1): Directory bread(block 70) failed [ 893.391538][T15453] FAT-fs (loop1): Directory bread(block 71) failed [ 893.413213][T15453] FAT-fs (loop1): Directory bread(block 72) failed [ 893.452273][T15453] FAT-fs (loop1): Directory bread(block 73) failed [ 893.515467][T15471] loop0: detected capacity change from 0 to 512 [ 893.655063][T15471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 893.682454][T15471] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 895.084101][T15487] device syzkaller0 entered promiscuous mode [ 895.108660][T12550] EXT4-fs (loop0): unmounting filesystem. [ 895.351165][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 895.362030][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 895.376025][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 895.391547][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 895.457710][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 895.468895][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 896.173789][T15507] loop0: detected capacity change from 0 to 256 [ 896.242064][T15505] loop9: detected capacity change from 0 to 512 [ 896.291223][T15505] EXT4-fs (loop9): 1 truncate cleaned up [ 896.321109][T15505] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 896.415860][T15505] netlink: 'syz.9.2659': attribute type 5 has an invalid length. [ 896.433516][T15517] loop1: detected capacity change from 0 to 256 [ 896.543086][T15517] FAT-fs (loop1): Directory bread(block 64) failed [ 896.584376][T10137] EXT4-fs (loop9): unmounting filesystem. [ 896.623320][T15517] FAT-fs (loop1): Directory bread(block 65) failed [ 896.633471][T15517] FAT-fs (loop1): Directory bread(block 66) failed [ 896.648627][T15517] FAT-fs (loop1): Directory bread(block 67) failed [ 896.655288][T15517] FAT-fs (loop1): Directory bread(block 68) failed [ 896.770196][T15517] FAT-fs (loop1): Directory bread(block 69) failed [ 896.800631][T15517] FAT-fs (loop1): Directory bread(block 70) failed [ 896.916298][T15517] FAT-fs (loop1): Directory bread(block 71) failed [ 896.924182][T15517] FAT-fs (loop1): Directory bread(block 72) failed [ 896.942268][T15517] FAT-fs (loop1): Directory bread(block 73) failed [ 896.972310][T15493] chnl_net:caif_netlink_parms(): no params data found [ 897.608453][ T4291] Bluetooth: hci5: command 0x0409 tx timeout [ 897.884594][T15493] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.892003][T15493] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.900331][T15493] device bridge_slave_0 entered promiscuous mode [ 897.909033][T15493] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.916280][T15493] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.924535][T15493] device bridge_slave_1 entered promiscuous mode [ 897.949565][T15493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.961083][T15493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.003481][T15493] team0: Port device team_slave_0 added [ 898.130235][T15548] device syzkaller0 entered promiscuous mode [ 898.159093][T15493] team0: Port device team_slave_1 added [ 900.287267][ T4291] Bluetooth: hci5: command 0x041b tx timeout [ 900.548907][T15584] loop1: detected capacity change from 0 to 256 [ 900.592781][T15584] FAT-fs (loop1): Directory bread(block 64) failed [ 900.605846][T15584] FAT-fs (loop1): Directory bread(block 65) failed [ 900.614680][T15584] FAT-fs (loop1): Directory bread(block 66) failed [ 900.623425][T15584] FAT-fs (loop1): Directory bread(block 67) failed [ 900.630638][T15584] FAT-fs (loop1): Directory bread(block 68) failed [ 900.640474][T15584] FAT-fs (loop1): Directory bread(block 69) failed [ 900.660427][T15584] FAT-fs (loop1): Directory bread(block 70) failed [ 900.674424][T15584] FAT-fs (loop1): Directory bread(block 71) failed [ 900.683570][T15584] FAT-fs (loop1): Directory bread(block 72) failed [ 900.695667][T15584] FAT-fs (loop1): Directory bread(block 73) failed [ 901.069867][T15593] loop1: detected capacity change from 0 to 256 [ 902.174755][T15546] device syzkaller0 entered promiscuous mode [ 902.327760][ T4291] Bluetooth: hci5: command 0x040f tx timeout [ 904.407453][ T4291] Bluetooth: hci5: command 0x0419 tx timeout [ 904.446700][ T4291] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 905.316440][T15630] loop0: detected capacity change from 0 to 512 [ 906.437637][T15630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 906.447118][T15630] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.022501][T12550] EXT4-fs (loop0): unmounting filesystem. [ 909.030643][T15493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.073213][T15493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.132310][T15493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.292798][T15493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.304105][T15493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.044389][T15493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.434832][T15663] loop0: detected capacity change from 0 to 256 [ 910.591009][T15493] device hsr_slave_0 entered promiscuous mode [ 910.929300][T15493] device hsr_slave_1 entered promiscuous mode [ 911.096946][T15493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 911.107391][T15493] Cannot create hsr debugfs directory [ 911.829816][T15683] loop9: detected capacity change from 0 to 512 [ 911.928516][T15683] EXT4-fs (loop9): 1 truncate cleaned up [ 911.951619][T15689] device syzkaller0 entered promiscuous mode [ 911.958049][T15683] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 912.115899][T15493] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.312975][T15683] netlink: 'syz.9.2704': attribute type 5 has an invalid length. [ 912.408947][T15493] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.429446][T10137] EXT4-fs (loop9): unmounting filesystem. [ 912.646172][T15493] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.552267][T15493] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.783759][T15493] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 914.983522][T15740] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 915.482099][T15493] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 915.525984][T15493] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 915.551229][T15493] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 916.085499][T15493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.114014][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 916.135412][T15757] loop9: detected capacity change from 0 to 512 [ 916.195427][T15757] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 916.210982][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 916.249388][T15493] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.266929][T15757] EXT4-fs error (device loop9): mb_free_blocks:1839: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt. [ 916.350905][T15757] EXT4-fs (loop9): 1 truncate cleaned up [ 916.360978][T15757] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 916.375478][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 916.422274][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 916.484112][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.491314][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.527816][T10137] EXT4-fs (loop9): unmounting filesystem. [ 916.605318][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 916.647432][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 916.702735][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.709960][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.219061][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 917.668111][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 917.716283][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 917.793849][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 917.839771][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 917.983152][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 918.012327][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 918.107121][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 918.172986][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 918.241678][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 918.330754][T15493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.176708][T15493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 919.233068][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 919.249562][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 920.276634][ T4325] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 920.372412][T15838] loop9: detected capacity change from 0 to 512 [ 920.438041][T15838] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 920.545309][T15838] EXT4-fs error (device loop9): mb_free_blocks:1839: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt. [ 920.558111][ T4325] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 920.568297][ T4325] usb 2-1: config 0 has no interface number 0 [ 920.574451][ T4325] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 920.575002][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 920.597626][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 920.748009][T15493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.792272][T15838] EXT4-fs (loop9): 1 truncate cleaned up [ 920.869512][T15838] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 921.182124][ T4325] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 921.191284][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.201602][ T4325] usb 2-1: config 0 descriptor?? [ 921.219545][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 921.242824][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 921.320794][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 921.357240][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 921.378004][T10137] EXT4-fs (loop9): unmounting filesystem. [ 921.398230][T15493] device veth0_vlan entered promiscuous mode [ 921.409154][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 921.443426][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 921.524125][T15819] blktrace: Concurrent blktraces are not allowed on sg0 [ 921.532665][ T4325] usb 2-1: USB disconnect, device number 18 [ 921.573830][T15851] device syzkaller0 entered promiscuous mode [ 921.672034][T15493] device veth1_vlan entered promiscuous mode [ 922.604533][T15883] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 925.528670][T15854] device syzkaller0 entered promiscuous mode [ 927.505520][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 927.519318][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 927.552992][T15493] device veth0_macvtap entered promiscuous mode [ 927.630598][T15493] device veth1_macvtap entered promiscuous mode [ 927.715573][T15493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.748920][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 927.764365][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 927.803647][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 927.847349][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 927.921400][T15493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.985781][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 928.036040][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 928.175905][T15915] loop9: detected capacity change from 0 to 512 [ 928.332558][T15915] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 928.536305][T15920] fuse: Bad value for 'fd' [ 928.581250][T15493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.634802][T15915] EXT4-fs error (device loop9): mb_free_blocks:1839: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt. [ 928.649654][T15493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.659251][T15915] EXT4-fs (loop9): 1 truncate cleaned up [ 928.664937][T15915] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 928.742024][T15493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.766313][T15493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.956268][T10137] EXT4-fs (loop9): unmounting filesystem. [ 929.755052][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.798589][T15937] loop9: detected capacity change from 0 to 1024 [ 929.814710][T15937] EXT4-fs: inline encryption not supported [ 929.834533][T15937] EXT4-fs: Ignoring removed bh option [ 929.911662][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.937247][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 929.973905][T15937] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 929.974791][ T4391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.451252][T15937] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #12: block 7: comm syz.9.2747: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 930.535523][ T4391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.614105][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 930.662689][T15955] EXT4-fs error (device loop9): ext4_check_all_de:666: inode #12: block 7: comm syz.9.2747: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 930.940489][T15961] loop3: detected capacity change from 0 to 1024 [ 930.964599][T10137] EXT4-fs (loop9): unmounting filesystem. [ 930.965224][T15961] EXT4-fs: Ignoring removed nomblk_io_submit option [ 931.088755][T15961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 931.163735][T15493] EXT4-fs (loop3): unmounting filesystem. [ 931.310312][T15975] loop3: detected capacity change from 0 to 512 [ 931.344058][T15978] loop9: detected capacity change from 0 to 512 [ 931.370550][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.376993][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.388483][T15978] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 931.388667][T15975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 931.427268][T15978] EXT4-fs error (device loop9): mb_free_blocks:1839: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt. [ 931.461353][T15975] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 931.494007][T15978] EXT4-fs (loop9): 1 truncate cleaned up [ 931.525381][T15978] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 932.524452][T10137] EXT4-fs (loop9): unmounting filesystem. [ 933.293853][T15493] EXT4-fs (loop3): unmounting filesystem. [ 934.882121][T16025] loop0: detected capacity change from 0 to 512 [ 934.976054][T16025] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 935.020370][T16025] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 935.086580][T16025] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2764: Corrupt directory, running e2fsck is recommended [ 935.137098][T16025] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 935.191240][T16025] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.2764: corrupted in-inode xattr [ 935.255830][T16038] loop9: detected capacity change from 0 to 512 [ 935.279297][T16025] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2764: couldn't read orphan inode 15 (err -117) [ 935.284250][T16038] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 935.341738][T16038] EXT4-fs error (device loop9): mb_free_blocks:1839: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt. [ 935.348528][T16025] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 935.362070][T16038] EXT4-fs (loop9): 1 truncate cleaned up [ 935.373542][T16038] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 935.460017][T16025] syz.0.2764 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 935.634105][T16025] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 935.646182][T16025] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 935.656490][T16025] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2764: Corrupt directory, running e2fsck is recommended [ 935.691770][T10137] EXT4-fs (loop9): unmounting filesystem. [ 935.853823][T12550] EXT4-fs (loop0): unmounting filesystem. [ 935.908435][T16055] loop9: detected capacity change from 0 to 512 [ 935.951602][T16055] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 935.965326][T16055] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 935.995704][T16059] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 937.277709][T10137] EXT4-fs (loop9): unmounting filesystem. [ 939.082041][T16112] loop0: detected capacity change from 0 to 512 [ 939.340926][T16112] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 939.522782][T16123] loop9: detected capacity change from 0 to 512 [ 942.069412][T16123] EXT4-fs warning (device loop9): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop9. [ 942.116010][T16112] EXT4-fs: failed to create workqueue [ 942.266527][T16112] EXT4-fs (loop0): mount failed [ 942.347971][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2785'. [ 942.912034][T16139] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 943.045920][T16144] netlink: 'syz.9.2791': attribute type 29 has an invalid length. [ 943.188901][T16144] netlink: 'syz.9.2791': attribute type 29 has an invalid length. [ 943.876169][T16148] netlink: 'syz.9.2791': attribute type 29 has an invalid length. [ 943.891981][T16150] netlink: 'syz.9.2791': attribute type 29 has an invalid length. [ 943.959241][T16154] netlink: 'syz.9.2791': attribute type 29 has an invalid length. [ 944.222892][T16158] netlink: 'syz.9.2793': attribute type 7 has an invalid length. [ 944.231665][T16158] netlink: 'syz.9.2793': attribute type 7 has an invalid length. [ 944.241986][T16158] netlink: 198580 bytes leftover after parsing attributes in process `syz.9.2793'. [ 955.672180][T16304] netlink: 'syz.0.2832': attribute type 29 has an invalid length. [ 955.754677][T16304] netlink: 'syz.0.2832': attribute type 29 has an invalid length. [ 955.854805][T16306] netlink: 'syz.0.2832': attribute type 29 has an invalid length. [ 955.864867][T16304] netlink: 'syz.0.2832': attribute type 29 has an invalid length. [ 955.920891][T16315] loop2: detected capacity change from 0 to 7 [ 955.947429][T16286] loop2: p1 [ 955.950826][T16286] loop2: partition table partially beyond EOD, truncated [ 955.958497][T16308] netlink: 'syz.0.2832': attribute type 29 has an invalid length. [ 956.263462][T16286] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 956.569257][T16315] loop2: p1 [ 956.623060][T16315] loop2: partition table partially beyond EOD, truncated [ 956.858717][T16315] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 957.501012][T16286] udevd[16286]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 957.535568][T16325] loop0: detected capacity change from 0 to 512 [ 957.617929][T16286] udevd[16286]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 957.653693][T16325] EXT4-fs (loop0): 1 truncate cleaned up [ 957.703535][T16325] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 957.847041][T16328] netlink: 'syz.0.2837': attribute type 5 has an invalid length. [ 957.994542][T16348] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 958.124077][T12550] EXT4-fs (loop0): unmounting filesystem. [ 959.805572][T16383] loop9: detected capacity change from 0 to 512 [ 959.970662][T16383] EXT4-fs: inline encryption not supported [ 960.607168][T16383] EXT4-fs: inline encryption not supported [ 960.717017][T16383] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 960.795546][T16383] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 960.876515][T16383] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2851: bg 0: block 248: padding at end of block bitmap is not set [ 960.939056][T16383] Quota error (device loop9): write_blk: dquota write failed [ 960.946699][T16383] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 960.956953][T16383] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.2851: Failed to acquire dquot type 1 [ 960.983988][T16383] EXT4-fs (loop9): 1 truncate cleaned up [ 960.996357][T16383] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 961.131415][T10137] EXT4-fs (loop9): unmounting filesystem. [ 961.219948][T16398] 9pnet: Could not find request transport: rdmR [ 961.944216][T16431] loop1: detected capacity change from 0 to 512 [ 962.010288][T16431] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 962.087733][T16431] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt. [ 962.114151][T16431] EXT4-fs (loop1): 1 truncate cleaned up [ 962.592117][T16431] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 962.810268][T16446] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2867'. [ 962.825797][T12343] EXT4-fs (loop1): unmounting filesystem. [ 963.102507][T16457] loop1: detected capacity change from 0 to 512 [ 963.147661][T16457] EXT4-fs: inline encryption not supported [ 963.153528][T16457] EXT4-fs: inline encryption not supported [ 963.185738][T16457] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 963.252512][T16457] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 963.423544][T16457] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2868: bg 0: block 248: padding at end of block bitmap is not set [ 963.471090][T16457] Quota error (device loop1): write_blk: dquota write failed [ 963.495596][T16467] loop0: detected capacity change from 0 to 256 [ 963.502170][T16457] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 963.633545][T16457] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2868: Failed to acquire dquot type 1 [ 963.749468][T16470] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 963.867420][T16457] EXT4-fs (loop1): 1 truncate cleaned up [ 963.890067][T16457] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 964.136857][T12343] EXT4-fs (loop1): unmounting filesystem. [ 964.762293][T16493] Illegal XDP return value 8 on prog (id 159) dev N/A, expect packet loss! [ 967.066645][ T4354] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 967.076908][T16531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2889'. [ 967.171045][T16534] batman_adv: batadv0: adding TT local entry ba:ff:00:e1:ff:ff to non-existent VLAN 815 [ 967.208660][T16534] batman_adv: batadv0: adding TT local entry ba:ff:00:e1:ff:ff to non-existent VLAN 815 [ 967.265556][T16534] batman_adv: batadv0: adding TT local entry ba:ff:00:e1:ff:ff to non-existent VLAN 815 [ 967.300878][T16534] batman_adv: batadv0: adding TT local entry ba:ff:00:e1:ff:ff to non-existent VLAN 815 [ 967.326982][ T4354] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 967.330928][T16534] batman_adv: batadv0: adding TT local entry ba:ff:00:e1:ff:ff to non-existent VLAN 815 [ 967.373999][ T4354] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 967.376122][T16534] batman_adv: batadv0: adding TT local entry ba:ff:00:e1:ff:ff to non-existent VLAN 815 [ 967.425429][ T4354] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 967.434535][T16534] batman_adv: batadv0: adding TT local entry ba:ff:00:e1:ff:ff to non-existent VLAN 815 [ 967.465345][ T4354] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 967.503487][ T4354] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 967.558662][ T4354] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.596652][ T4354] usb 10-1: Product: syz [ 967.611277][ T4354] usb 10-1: Manufacturer: syz [ 967.616006][ T4354] usb 10-1: SerialNumber: syz [ 967.635360][ T4354] usb 10-1: config 0 descriptor?? [ 968.563992][ T4354] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 968.614847][T16560] loop1: detected capacity change from 0 to 256 [ 968.738876][T16520] 9pnet: Could not find request transport: rdmR [ 968.776658][ T7] usb 10-1: USB disconnect, device number 11 [ 969.043580][T16570] loop3: detected capacity change from 0 to 512 [ 969.144374][T16570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 969.173124][T16570] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 970.220733][T15493] EXT4-fs (loop3): unmounting filesystem. [ 971.380263][T16618] loop0: detected capacity change from 0 to 512 [ 971.399875][T16618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 971.427523][T16625] overlayfs: missing 'workdir' [ 971.435343][T16618] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt. [ 971.475332][T16618] EXT4-fs (loop0): 1 truncate cleaned up [ 971.481720][T16618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 971.637975][T16632] loop9: detected capacity change from 0 to 512 [ 971.661811][T16632] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 971.674785][T12550] EXT4-fs (loop0): unmounting filesystem. [ 971.693657][T16632] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 973.695237][T10137] EXT4-fs (loop9): unmounting filesystem. [ 973.862515][T16661] overlayfs: missing 'workdir' [ 974.000078][T16666] loop1: detected capacity change from 0 to 512 [ 974.074856][T16666] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 974.173251][T16666] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt. [ 974.296271][T16666] EXT4-fs (loop1): 1 truncate cleaned up [ 974.352686][T16666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 974.382069][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 974.393279][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 974.402347][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 974.413896][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 974.421761][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 974.429158][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 974.614816][T16682] loop3: detected capacity change from 0 to 512 [ 974.652410][T16682] EXT4-fs: inline encryption not supported [ 974.673762][T16682] EXT4-fs: inline encryption not supported [ 974.702967][T16682] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 974.781399][T12343] EXT4-fs (loop1): unmounting filesystem. [ 974.889235][T16682] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 975.094291][T16682] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2932: bg 0: block 248: padding at end of block bitmap is not set [ 975.384719][T16682] Quota error (device loop3): write_blk: dquota write failed [ 975.476320][T16682] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 975.486532][T16682] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.2932: Failed to acquire dquot type 1 [ 975.517754][T16682] EXT4-fs (loop3): 1 truncate cleaned up [ 975.525771][T16682] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 975.717022][T15493] EXT4-fs (loop3): unmounting filesystem. [ 975.855089][T16708] overlayfs: missing 'workdir' [ 975.869551][T16709] random: crng reseeded on system resumption [ 976.012656][T16678] chnl_net:caif_netlink_parms(): no params data found [ 976.486764][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 976.530228][T16678] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.538161][T16678] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.553640][T16731] loop1: detected capacity change from 0 to 512 [ 976.579717][T16678] device bridge_slave_0 entered promiscuous mode [ 976.605828][T16678] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.629530][T16731] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 976.780396][T16678] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.832270][T16678] device bridge_slave_1 entered promiscuous mode [ 976.856972][T16731] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt. [ 976.913495][T16731] EXT4-fs (loop1): 1 truncate cleaned up [ 976.919523][T16731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 977.000861][T12343] EXT4-fs (loop1): unmounting filesystem. [ 977.011092][T16739] loop3: detected capacity change from 0 to 512 [ 977.119467][T16739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 977.155236][T16739] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 977.343935][T16678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.473607][T16678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.613831][T16678] team0: Port device team_slave_0 added [ 977.668377][T16678] team0: Port device team_slave_1 added [ 977.759674][T16678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.766774][T16678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.848864][T16678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.945632][T16678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.952891][T16678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.964611][T15493] EXT4-fs (loop3): unmounting filesystem. [ 977.989804][T16678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.129093][T16678] device hsr_slave_0 entered promiscuous mode [ 978.215283][T16678] device hsr_slave_1 entered promiscuous mode [ 978.244034][T16678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 978.302748][T16678] Cannot create hsr debugfs directory [ 978.319421][T16768] loop0: detected capacity change from 0 to 256 [ 978.360611][T16766] random: crng reseeded on system resumption [ 978.566653][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 978.863495][T16781] overlayfs: failed to resolve './file0': -2 [ 978.894017][T16781] loop3: detected capacity change from 0 to 256 [ 978.969045][T16781] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 979.410743][T16678] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.592301][T16678] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.783758][T16678] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.004535][T16678] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.140535][T16811] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 980.572843][T16816] random: crng reseeded on system resumption [ 980.728739][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 981.175138][T16678] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 981.223680][T16678] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 981.311125][T16678] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 981.342126][T16678] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 982.420606][T16678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.446843][T16843] overlayfs: failed to resolve './file0': -2 [ 982.476336][T16843] loop3: detected capacity change from 0 to 256 [ 982.503903][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 982.514687][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 982.566376][T16843] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 982.586267][T16678] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.612073][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 982.663237][ T14] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 982.687199][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 982.706130][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.713357][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.806624][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 982.848841][ T4373] tipc: Disabling bearer [ 982.865518][ T4373] tipc: Left network mode [ 982.872128][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 982.883832][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 982.921585][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 982.932421][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 982.950255][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 982.958606][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 982.979865][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.987063][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.005665][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 983.076962][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 983.093327][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 983.107810][T16850] loop0: detected capacity change from 0 to 512 [ 983.286342][T16853] loop3: detected capacity change from 0 to 512 [ 984.386790][ T14] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 984.415981][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.453844][T16850] EXT4-fs: inline encryption not supported [ 984.601619][T16850] EXT4-fs: inline encryption not supported [ 985.386641][ T14] usb 10-1: Product: syz [ 985.390961][ T14] usb 10-1: Manufacturer: syz [ 985.395676][ T14] usb 10-1: SerialNumber: syz [ 985.823788][ T14] usb 10-1: config 0 descriptor?? [ 985.842592][ T14] usb 10-1: can't set config #0, error -71 [ 985.843823][T16853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 985.849681][ T14] usb 10-1: USB disconnect, device number 12 [ 985.857508][T16853] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 985.876199][T16850] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 985.913555][T16850] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 986.078007][T16861] random: crng reseeded on system resumption [ 986.713852][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 986.727965][T15493] EXT4-fs (loop3): unmounting filesystem. [ 986.758117][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 986.826703][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 986.902379][T16878] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 986.911895][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 986.958933][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 987.018095][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 987.087459][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 987.302101][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 987.491355][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 988.169730][T16895] random: crng reseeded on system resumption [ 988.276612][ T7] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 988.605757][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 988.648832][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 988.683500][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 988.706722][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 988.730623][ T7] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 988.763177][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.836023][ T7] usb 1-1: Product: syz [ 988.861206][ T7] usb 1-1: Manufacturer: syz [ 988.893830][ T7] usb 1-1: SerialNumber: syz [ 988.913408][T16911] loop3: detected capacity change from 0 to 512 [ 988.929526][T16911] EXT4-fs: inline encryption not supported [ 988.938401][T16911] EXT4-fs: inline encryption not supported [ 988.958495][T16911] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 988.958903][ T7] usb 1-1: config 0 descriptor?? [ 988.989466][T16911] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 989.033627][T16911] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2988: bg 0: block 248: padding at end of block bitmap is not set [ 989.061341][T16911] Quota error (device loop3): write_blk: dquota write failed [ 989.068910][T16911] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 989.105589][T16911] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.2988: Failed to acquire dquot type 1 [ 989.203321][T16911] EXT4-fs (loop3): 1 truncate cleaned up [ 989.222104][T16911] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 989.391189][ T7] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 989.428694][T15493] EXT4-fs (loop3): unmounting filesystem. [ 989.577487][T16892] 9pnet: Could not find request transport: rdmR [ 989.602972][ T7] usb 1-1: USB disconnect, device number 22 [ 989.867857][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 989.879857][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 989.984674][T16678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.471440][T16942] loop9: detected capacity change from 0 to 512 [ 992.395840][T16942] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 992.404986][T16942] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.826892][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.833262][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.886419][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 992.911827][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 992.950654][T10137] EXT4-fs (loop9): unmounting filesystem. [ 993.076985][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 993.095977][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 993.139044][T16678] device veth0_vlan entered promiscuous mode [ 993.146411][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 993.232774][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.046305][T16974] netlink: 'syz.3.3000': attribute type 1 has an invalid length. [ 994.054999][T16974] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3000'. [ 994.092384][T16678] device veth1_vlan entered promiscuous mode [ 994.281361][ T4373] device hsr_slave_0 left promiscuous mode [ 994.297429][T16982] input: syz0 as /devices/virtual/input/input34 [ 994.319402][ T4373] device hsr_slave_1 left promiscuous mode [ 994.489220][ T4373] device bridge0 left promiscuous mode [ 994.529073][ T4373] device veth1_macvtap left promiscuous mode [ 994.535197][ T4373] device veth0_macvtap left promiscuous mode [ 994.551832][ T4373] device veth1_vlan left promiscuous mode [ 994.694865][T17000] random: crng reseeded on system resumption [ 994.977247][T17004] loop0: detected capacity change from 0 to 512 [ 995.002244][ T4355] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 995.023271][T17004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 995.125364][T17004] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt. [ 995.198842][ T4355] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 995.227415][ T4355] usb 2-1: config 0 has no interface number 0 [ 995.234110][ T4355] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 995.266943][T17004] EXT4-fs (loop0): 1 truncate cleaned up [ 995.272834][T17004] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 995.290956][ T4355] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 995.316640][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.344512][ T4355] usb 2-1: config 0 descriptor?? [ 995.453805][T12550] EXT4-fs (loop0): unmounting filesystem. [ 995.725922][T17032] blktrace: Concurrent blktraces are not allowed on sg0 [ 995.751230][ T4322] usb 2-1: USB disconnect, device number 19 [ 997.047896][T17046] random: crng reseeded on system resumption [ 998.415797][ T4373] bond0 (unregistering): Released all slaves [ 998.561997][T16678] device veth0_macvtap entered promiscuous mode [ 998.571410][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 998.584748][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 998.594182][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 998.624604][T17061] tipc: Failed to obtain node identity [ 998.631511][T17061] tipc: Enabling of bearer rejected, failed to enable media [ 998.660900][T16678] device veth1_macvtap entered promiscuous mode [ 998.721696][T16678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.768588][T16678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.810759][T16678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.873274][T17069] raw_sendmsg: syz.0.3027 forgot to set AF_INET. Fix it! [ 998.887342][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 998.894916][T17067] page:ffffea00014c16c0 refcount:4 mapcount:1 mapping:ffff8880575c3c38 index:0x0 pfn:0x5305b [ 998.897573][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 998.906140][T17067] memcg:ffff88807acfe000 [ 998.906152][T17067] aops:shmem_aops ino:186 [ 998.922842][T17067] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 998.932673][T17067] raw: 00fff60000080015 ffff88807c654248 ffffea0001307808 ffff8880575c3c38 [ 998.941250][T17067] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88807acfe000 [ 998.949819][T17067] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 998.957086][T17067] page_owner tracks the page as allocated [ 998.963460][T17067] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 17069, tgid 17067 (syz.0.3027), ts 998870439491, free_ts 998525215113 [ 998.981349][T17067] post_alloc_hook+0x173/0x1a0 [ 998.986191][T17067] get_page_from_freelist+0x1a1e/0x1ab0 [ 998.991820][T17067] __alloc_pages+0x1ec/0x4f0 [ 998.996419][T17067] __folio_alloc+0xe/0x30 [ 999.000761][T17067] vma_alloc_folio+0x4a3/0x900 [ 999.005590][T17067] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 999.011336][T17067] shmem_get_folio_gfp+0x1361/0x3400 [ 999.016619][T17067] shmem_read_mapping_page_gfp+0x99/0x2b0 [ 999.022348][T17067] udmabuf_create+0x99b/0xfc0 [ 999.027091][T17067] udmabuf_ioctl+0x1f3/0x300 [ 999.031681][T17067] __se_sys_ioctl+0xfa/0x170 [ 999.036288][T17067] do_syscall_64+0x4c/0xa0 [ 999.040711][T17067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 999.046671][T17067] page last free stack trace: [ 999.051362][T17067] free_unref_page_prepare+0x8b4/0x9a0 [ 999.056818][T17067] free_unref_page_list+0xbb/0x8e0 [ 999.061925][T17067] release_pages+0x1fa6/0x2220 [ 999.066738][T17067] __pagevec_release+0x6d/0xe0 [ 999.071513][T17067] shmem_undo_range+0x7c2/0x20c0 [ 999.076480][T17067] shmem_evict_inode+0x25b/0xa80 [ 999.081418][T17067] evict+0x4c9/0x8d0 [ 999.085342][T17067] __dentry_kill+0x431/0x650 [ 999.089971][T17067] dentry_kill+0xb8/0x290 [ 999.094294][T17067] dput+0xfa/0x1d0 [ 999.098007][T17067] __fput+0x5e0/0x920 [ 999.102041][T17067] task_work_run+0x1d0/0x260 [ 999.106679][T17067] do_exit+0x982/0x2480 [ 999.110855][T17067] do_group_exit+0x217/0x2d0 [ 999.115442][T17067] get_signal+0x1272/0x1350 [ 999.119987][T17067] arch_do_signal_or_restart+0xc4/0x1350 [ 999.125731][T17067] ------------[ cut here ]------------ [ 999.131183][T17067] kernel BUG at mm/filemap.c:153! [ 999.136221][T17067] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 999.142442][T17067] CPU: 0 PID: 17067 Comm: syz.0.3027 Not tainted syzkaller #0 [ 999.149905][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 999.159958][T17067] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 999.166299][T17067] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 0a f9 27 00 e9 0c fe ff ff e8 80 f1 d6 ff 48 89 df 48 c7 c6 40 00 95 8a e8 f1 0c 12 00 <0f> 0b e8 6a f1 d6 ff 48 89 df 48 c7 c6 a0 05 95 8a e8 db 0c 12 00 [ 999.185940][T17067] RSP: 0018:ffffc90004e67618 EFLAGS: 00010046 [ 999.192071][T17067] RAX: 93f88574a44b5000 RBX: ffffea00014c16c0 RCX: 93f88574a44b5000 [ 999.200033][T17067] RDX: 0000000000000002 RSI: ffffffff8a8c2c20 RDI: ffffffff8adf2060 [ 999.207990][T17067] RBP: ffffc90004e67778 R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 999.215947][T17067] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: dffffc0000000000 [ 999.223905][T17067] R13: dffffc0000000000 R14: ffff8880575c3c38 R15: 1ffff920009cced4 [ 999.231864][T17067] FS: 000055557f0b4500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 999.240780][T17067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 999.247348][T17067] CR2: 000000110c33547f CR3: 0000000050757000 CR4: 00000000003506f0 [ 999.255309][T17067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 999.263269][T17067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 999.271230][T17067] Call Trace: [ 999.274660][T17067] [ 999.277624][T17067] __filemap_remove_folio+0xbc/0x8a0 [ 999.282933][T17067] ? __rwlock_init+0x140/0x140 [ 999.287747][T17067] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 999.294756][T17067] ? _raw_spin_lock_irq+0xb7/0xf0 [ 999.299769][T17067] ? _raw_spin_lock_irqsave+0x100/0x100 [ 999.305304][T17067] filemap_remove_folio+0xed/0x2c0 [ 999.310405][T17067] truncate_inode_folio+0x59/0x70 [ 999.315422][T17067] shmem_undo_range+0x533/0x20c0 [ 999.320356][T17067] ? shmem_truncate_range+0xb0/0xb0 [ 999.325722][T17067] ? do_raw_spin_lock+0x128/0x2f0 [ 999.330819][T17067] ? __rwlock_init+0x140/0x140 [ 999.335568][T17067] shmem_evict_inode+0x25b/0xa80 [ 999.340498][T17067] ? inode_wait_for_writeback+0x1df/0x220 [ 999.346449][T17067] ? shmem_free_in_core_inode+0xb0/0xb0 [ 999.351987][T17067] ? do_raw_spin_lock+0x128/0x2f0 [ 999.356997][T17067] ? bit_waitqueue+0x30/0x30 [ 999.361597][T17067] ? do_raw_spin_unlock+0x11d/0x230 [ 999.366868][T17067] ? shmem_free_in_core_inode+0xb0/0xb0 [ 999.372404][T17067] evict+0x4c9/0x8d0 [ 999.376293][T17067] ? proc_nr_inodes+0x2f0/0x2f0 [ 999.381133][T17067] ? do_raw_spin_unlock+0x11d/0x230 [ 999.386320][T17067] ? _raw_spin_unlock+0x24/0x40 [ 999.391158][T17067] ? iput+0x768/0x980 [ 999.395134][T17067] __dentry_kill+0x431/0x650 [ 999.399721][T17067] dentry_kill+0xb8/0x290 [ 999.404044][T17067] ? dput+0x37/0x1d0 [ 999.407929][T17067] dput+0xfa/0x1d0 [ 999.411638][T17067] __fput+0x5e0/0x920 [ 999.415610][T17067] task_work_run+0x1d0/0x260 [ 999.420191][T17067] ? task_work_cancel+0x220/0x220 [ 999.425203][T17067] ? exit_to_user_mode_loop+0x3b/0x110 [ 999.430744][T17067] exit_to_user_mode_loop+0xe6/0x110 [ 999.436018][T17067] exit_to_user_mode_prepare+0xee/0x180 [ 999.441553][T17067] syscall_exit_to_user_mode+0x16/0x40 [ 999.447006][T17067] do_syscall_64+0x58/0xa0 [ 999.451406][T17067] ? clear_bhb_loop+0x60/0xb0 [ 999.456077][T17067] ? clear_bhb_loop+0x60/0xb0 [ 999.460745][T17067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 999.466628][T17067] RIP: 0033:0x7f812279ce59 [ 999.471040][T17067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.490636][T17067] RSP: 002b:00007ffe3658d668 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 999.499037][T17067] RAX: 0000000000000000 RBX: 00007ffe3658d750 RCX: 00007f812279ce59 [ 999.506992][T17067] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 999.515036][T17067] RBP: 00000000000f3d97 R08: 0000000000000001 R09: 0000000000000000 [ 999.522993][T17067] R10: 0000001b33920000 R11: 0000000000000246 R12: 00007ffe3658d790 [ 999.530950][T17067] R13: 00007f8122a15fac R14: 00000000000f3de6 R15: 00007f8122a15fa0 [ 999.538967][T17067] [ 999.541980][T17067] Modules linked in: [ 999.545868][T17067] ---[ end trace 0000000000000000 ]--- [ 999.551307][T17067] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 999.557541][T17067] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 0a f9 27 00 e9 0c fe ff ff e8 80 f1 d6 ff 48 89 df 48 c7 c6 40 00 95 8a e8 f1 0c 12 00 <0f> 0b e8 6a f1 d6 ff 48 89 df 48 c7 c6 a0 05 95 8a e8 db 0c 12 00 [ 999.577129][T17067] RSP: 0018:ffffc90004e67618 EFLAGS: 00010046 [ 999.583203][T17067] RAX: 93f88574a44b5000 RBX: ffffea00014c16c0 RCX: 93f88574a44b5000 [ 999.591162][T17067] RDX: 0000000000000002 RSI: ffffffff8a8c2c20 RDI: ffffffff8adf2060 [ 999.599123][T17067] RBP: ffffc90004e67778 R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 999.607081][T17067] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: dffffc0000000000 [ 999.615038][T17067] R13: dffffc0000000000 R14: ffff8880575c3c38 R15: 1ffff920009cced4 [ 999.623008][T17067] FS: 000055557f0b4500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 999.631923][T17067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 999.638502][T17067] CR2: 000000110c33547f CR3: 0000000050757000 CR4: 00000000003506f0 [ 999.646466][T17067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 999.654425][T17067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 999.662451][T17067] Kernel panic - not syncing: Fatal exception [ 999.668735][T17067] Kernel Offset: disabled [ 999.673047][T17067] Rebooting in 86400 seconds..